{"data":{"id":"b1e19156-8dba-42e3-8a1c-a7baac0e3f11","title":"Inverting Multi-Vector Visual Document Indices","summary":"This research shows that multi-vector visual document retrievers can be inverted, letting an attacker who runs or breaches the vector store reproduce source pages from the stored index alone. On the ViDoRe v3 benchmark, inverted pages recover 47% of words and rank their source page first 98.4% of the time. Token pooling and shuffling cut word recall to about 8%, but a model that restores shuffled order raises first-rank matches from 3.8% to 93.5%.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.09920v1","publishedAt":"2026-10-07T12:10:11.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["data_extraction"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["vision-language model","multi-vector visual document retrievers","ViDoRe v3"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-07T12:10:11.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":null}}