Mental Damage: Caption Poisoning Attacks on Retrieval-Augmented Text-to-Music Generation

Published in IEEE Symposium on Security and Privacy Workshops, ArtSec (IEEE S&P'26 Workshops), 2026

Yizhu Wen, Shuhao Zhang, Nan Zhang, Long Cheng, Hanqing Guo
IEEE Symposium on Security and Privacy Workshops, ArtSec (IEEE S&P’26 Workshops)

Poisoning the captions in a retrieval corpus steers a retrieval-augmented text-to-music pipeline toward an attacker’s target while staying aligned with the user’s query.

[arXiv] [Program] [Code]