Wang, Haowei, et al. “Joint-GCG: Unified Gradient-Based Poisoning Attacks on Retrieval-Augmented Generation Systems”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 40, no. 42, Mar. 2026, pp. 35793-01, doi:10.1609/aaai.v40i42.40893.