Fabricated evidence injection steers model viewpoints without a jailbreak.

A new paper shows LLMs can be pushed toward misleading conclusions when fabricated "evidence" gets injected into context. No exploit, no jailbreak, just planted false context shifting the stated answer. Source: arXiv This is the threat model RAG builders keep underrating. Your retrieval layer is an attack surface, and "the model said it confidently" is not validation.