Vector database
A database that stores embeddings and returns the vectors nearest to a query vector, used for retrieval in RAG. It must enforce the same per-user and per-tenant access rules as the source documents inside the query, not by filtering results afterward (OWASP LLM09:2026).
- Also called
- vector store
- Defined in
- OWASP Top 10 for LLM Applications 2026
- Identifiers
- LLM09:2026 Vector and Embedding Weaknesses
Covered in
Practice: RAG access control lab: Stop a retriever from returning another tenant’s documents · Local project: Enforce retrieval and tool boundaries across crashes