AI security lab · Rag Document Attacks
Multi-tenant RAG systems share a common knowledge base. Without proper isolation, one user's data can leak into another user's retrieval results. **Challenge:** You're a user on a shared RAG platform. Exploit the lack of tenant isolation to retrieve another user's private documents that were uploaded to the shared vector store.
New here? Create a free account. You will come straight back to this lab.
Part of QbitDojo Pro. Free accounts include 10 labs to start with.
Technique
Cross-User RAG Contamination
OWASP LLM Top 10 (2025)
LLM08 Vector and Embedding Weaknesses
Step 1
A live AI target
Each lab is a real language model with its own instructions, guardrails and a secret flag it must protect.
Step 2
You attack it
Talk to it like a red teamer would. Craft prompts, chain techniques and use hints if you get stuck.
Step 3
Capture the flag
Get the model to reveal the flag to solve the lab, earn XP and climb the leaderboard.
Step 4
Then defend it
In labs with Defense Mode, write the hardened system prompt that blocks the attack you just used.