Issue Details
Vector and Embedding Weaknesses
llm08-2025 • Rank #8 in OWASP 2025
Explanation
Vector and embedding weaknesses include index poisoning, unauthorized retrieval, and similarity abuse that surfaces sensitive data. Attackers manipulate retrieval context to bias responses or exfiltrate records through crafted queries. Weak access boundaries and poor corpus hygiene significantly increase impact.
Remedy
Apply strict access controls and tenant isolation to vector infrastructure. Validate retrieval requests, harden indexing pipelines, and monitor retrieval anomalies for abuse indicators. Periodically test corpus integrity and relevance controls to ensure retrieval remains trustworthy and policy-compliant.
| Year | Rank | Category |
|---|---|---|
| 2025 | #8 | llm08-2025 - Vector and Embedding Weaknesses |