Tag See all →

#multi-tenant

2 stories

Security Bug Report

Multi-tenant RAG leaked another customer's document through a missing filter

Ryan Pham · Jan 8, 2026 · 6 min read

A customer saw a snippet from another company's document in an AI answer. A new 'related questions' feature queried the vector store through a helper that did not apply the tenant filter. We moved tenant scoping into the repository layer so no code path can skip it.

Banner: pgvector HNSW filtered query returns fewer results than the LIMIT

Databases Bug Report

pgvector HNSW with a WHERE filter returns fewer rows than LIMIT

Ryan Pham · Mar 12, 2025 · 6 min read

Small tenants in our RAG product got 2 or 3 chunks back instead of 10, and sometimes none. HNSW finds ef_search candidates first and applies the tenant filter afterwards. Iterative index scans in pgvector 0.8 plus partial indexes for big tenants fixed recall.