Trojaning the Alignment: Stealthy Backdoor Attacks against Graph Foundation Models
STAG is proposed, a stealthy trojan attack framework designed for the graph-language alignment interface of GFMs on TAGs that realizes trigger nodes as readable text through candidate retrieval and regularizes the trigger-attached subgraph so that its local structure remains close to the original subgraph.