You Are an Expert: RAG Injection and Guided Error Expert Activation for Jailbreaking Large Language Models
TL;DR
This work proposes a novel jailbreak framework: YAE, which enhances the model's dependency on external information by constructing a RAG‐based knowledge base containing harmful Q&A content and leverages Guide MoE, a routing‐inspired prompting strategy, to guide the model toward alternative reasoning trajectories through expert‐role prompting and domain‐specific perturbations.
Abstract
With the rapid development and widespread deployment of large language models (LLMs), the security and robustness of these models have emerged as critical research topics. Among various threats, jailbreak attacks, which aim to circumvent built‐in safety mechanisms, have garnered considerable attention as a key means of breaching model protections. However, existing jailbreak methods still face several limitations, such as excessive reliance on the model's internal capabilities, high attack costs and insufficiently comprehensive evaluation strategies. To address these challenges, we propose a novel jailbreak framework: YAE. This method enhances the model's dependency on external information by constructing a RAG‐based knowledge base containing harmful Q&A content. It also leverages Guide MoE, a routing‐inspired prompting strategy, to guide the model toward alternative reasoning trajectories through expert‐role prompting and domain‐specific perturbations, thereby inducing more deceptive responses. Furthermore, Adversarial Fine‐Tuning is employed to further optimize the performance of jailbreak attacks. We conduct extensive experiments under various settings, and the results demonstrate that YAE achieves state‐of‐the‐art performance in terms of both attack success rate (ASR) and efficiency, highlighting its strong overall effectiveness.