Researchers have discovered a vulnerability in agentic search systems that use retrieval-augmented generation (RAG). An attacker can compromise the retriever and inject a backdoor that can manipulate the search results, suppress useful evidence, or steer the agent towards prolonged search, without modifying the underlying corpus. The backdoor can be concealed by purifying it and leaving behind a weakened signature that fools detectors.