Cross-tenant leakage through a shared vector store

If embeddings from multiple tenants share an index without a metadata filter on every query, one tenant can retrieve another's chunks.