What are the top 3 security risks of a production RAG system?

(1) Indirect prompt injection via retrieved documents — adversary plants malicious content in indexed corpus; mitigation: content provenance + sanitisation. (2) Sensitive data leakage — RAG retrieves and exposes data user shouldn't access (cross-tenant, role violation); mitigation: per-user/per-role retrieval scoping, row-level access controls. (3) Vector database poisoning — adversary injects misleading embeddings; mitigation: embedding signature verification, anomaly detection on retrieved vectors. Bonus risks: prompt manipulation via metadata, retrieval cost exhaustion (DoS), hallucinated source attribution.