AlignPoison Targets Generative Recommenders via Decoding-Aligned Prefixes
October 14, 2026
Injecting fewer than 1% synthetic interactions can significantly increase the promotion of malicious targets in generative recommendation models. The attack leverages short, context-aligned prefixes and decoding alignment to exploit vulnerabilities in autoregressive recommendation systems.
HOW THIS AFFECTS YOU
●
researcherYou should account for decoding alignment when evaluating the robustness of autoregressive recommendation architectures.
●
policyThis highlights a new surface for adversarial manipulation in consumer-facing recommendation APIs.