RAG security: the forgotten attack surface

Why your sanitized user queries don't protect you when the threat enters through your knowledge base.