The service may be configured to call an embedding model to vectorize content at ingestion or query time, so that raw text or media is sent to a model endpoint instead of pre-computed vectors.
Integrated Embedding Generation
CCC.Vector.CP13
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.Vector.TH02 | Index is Poisoned by Crafted Embeddings or Content | Vectors or source content submitted through ingestion endpoints, pulled from connected data sources, or vectorized by an integrated embedding model may be crafted so that they rank highly for targeted queries. Search results are steered toward chosen records or degraded for legitimate ones, and downstream applications consume the manipulated results. Integrity of the index and of every system that relies on it is compromised. |
| CCC.Vector.TH07 | Content is Disclosed to or Altered by an Embedding Model Endpoint | When the service generates embeddings by calling a model endpoint, raw content is transmitted to that endpoint and the vectors it returns are trusted without verification. A misconfigured, third-party, or substituted endpoint receives sensitive content, or returns embeddings that misrepresent the content. Confidentiality of the content and integrity of the index are compromised. |