Leaked embeddings are leaked text: the RAG risk nobody checks

Most RAG security talk is about prompt injection. Here's a risk almost nobody checks: the embedding vectors themselves. Embeddings are not a one-way hash It's tempting to treat an embedding as a safe, anonymized fingerprint of your text. It isn't. Recent work (vec2text, Morris et al., 2023) showed you can invert an embedding back into much of its original text. The attack is simple in spirit: start from a guess, embed it, compare to the target vector, and iteratively edit the text until its…