owasp-llm02 1 Sensitive Information Disclosure in RAG - Vectors, Multi-Tenancy, and Access Boundaries Oct 2, 2026