# Guided Lab: Poisoning a RAG Pipeline

> A hands-on, end-to-end lab where you craft, ingest, and trigger a poisoned document in a simulated RAG environment.

Canonical: https://codelivly.com/rooms/guided-lab-poisoning-a-rag-pipeline
Last updated: 2026-10-13

| | |
|---|---|
| Level | Intermediate |
| Category | Cybersecurity |
| Lessons | 3 |
| Estimated time | 30 min |
| XP | 100 |

Codelivly cybersecurity eLearning SaaS platform — architecture, curriculum, design system for executing a complete RAG poisoning attack chain. In this guided lab, you will craft a malicious document optimized for retrieval, inject it into a target knowledge base via an ingestion endpoint, and verify that it successfully hijacks the LLM's output for future, unsuspecting users.

## Lessons

1. Lab Setup and Target Knowledge Base Overview (30 min)
2. Crafting and Inserting the Poisoned Document (30 min)
3. Verifying the Poison Triggers on a Future Query (30 min)

## Related

- [Learning path: RAG and Vector Database Attacks](https://codelivly.com/learning-paths/rag-and-vector-database-attacks)
- [All rooms](https://codelivly.com/rooms)