GraphSteal: Structural Knowledge Stealing from Graph RAG via Traversal Reconstruction

arXiv·medium signal

Demonstrates that Graph RAG systems expose their underlying knowledge graph structure through query traversal patterns, enabling attackers to reconstruct entities, relations, and graph topology. Goes beyond prior RAG poisoning attacks — this extracts the proprietary knowledge base itself. Important for enterprises building Graph RAG on confidential data.