RAG Security and Privacy: Formalizing the Threat Model and Attack Surface. - Atousa Arzanipour; Rouzbeh Behnia; Reza Ebrahimi 001; Kaushik Dutta (CoRR, 2025)