Tag See all →

#vector-database

2 stories

Banner: multi-tenant RAG feature leaking another tenant's document because a filter was missing

Security Bug Report

Multi-tenant RAG leaked another customer's document through a missing filter

Ryan Pham · Jan 8, 2026 · 6 min read

A customer saw a snippet from another company's document in an AI answer. A new 'related questions' feature queried the vector store through a helper that did not apply the tenant filter. We moved tenant scoping into the repository layer so no code path can skip it.

Banner: RAG assistant answering from documents that were deleted from the source

AI & Machine Learning Bug Report

RAG bot keeps quoting a policy page we deleted a month ago

Ryan Pham · Dec 3, 2025 · 7 min read

Our support assistant quoted an old refund policy that had been removed from the help center weeks earlier. The ingestion pipeline only ever upserted chunks and never deleted them. We added source-of-truth sync, document versions and a nightly reconciliation job.