Challenge Levels

Each level targets a specific RAG security vulnerability class. Complete levels in order or jump to the class most relevant to your current work.

Level 0 — Orientation Available

Learn how the Challenge Server works, what tools you need, and what a complete challenge submission looks like.

Level 1 — The Leaky Namespace Available

Vendor: Pinecone  |  Class: Missing namespace isolation

A multi-tenant Pinecone application uses namespaces to separate customer data. Prove whether Tenant A can retrieve Tenant B’s records by querying through the application with Tenant A credentials.

Level 2 — The Missing Filter Available

Vendor: Qdrant  |  Class: Absent payload-filter tenant enforcement

A Qdrant-backed RAG application stores tenant identifiers in the payload but does not consistently apply a query_filter. Find the retrieval path where the filter is missing and prove cross-tenant access.

Level 3 — The Wrong Tenant Available

Vendor: Weaviate  |  Class: Wrong-tenant object insertion and retrieval

A Weaviate multi-tenancy deployment uses application-controlled tenant values. Find the input that causes objects to be inserted into or retrieved from the wrong tenant’s partition.

Levels 4–8 Planned

Additional levels covering frontend key exposure, RAG poisoning, shared namespace mixing, fallback path bypass, and semantic cache leakage are under development.