arXiv: Poisoning Attacks on the PGM-index

A new academic paper, titled Poisoning Attacks on the PGM-index, was published on arXiv on September 2, 2026. The research demonstrates a novel vulnerability in the PGM-index, a data structure used to accelerate database queries by learning the distribution of data. The authors show that an attacker can inject carefully crafted, seemingly benign data points into a database to corrupt the learned index, causing it to return incorrect query results or degrade performance drastically. This is a form of data poisoning that targets the machine learning component of the index, rather than exploiting traditional software bugs.

The primary affected organizations are those deploying high-performance database systems, data lakes, or real-time analytics platforms that rely on learned index structures, particularly in cloud services, financial trading, and large-scale e-commerce. Any sector using PGM-index or similar learned indexes for query optimization should consider this a supply-chain and data-integrity risk, especially if they ingest untrusted external data. Compliance teams should note that while no specific EU regulation names this attack, it falls under broader data integrity and security obligations, such as those in GDPR (Article 32) and the proposed AI Act’s risk management requirements for systems using learned components.

Compliance teams should immediately assess whether their database infrastructure employs PGM-index or comparable learned indexes. If so, they should coordinate with engineering to implement input validation, anomaly detection for data distribution shifts, and fallback to traditional indexes for untrusted data sources. Additionally, update internal threat models and vendor risk assessments to include poisoning of learned data structures, and document this risk in any required security impact assessments. No immediate regulatory filing is needed, but proactive monitoring of vendor patches is advised.