Vector databases power RAG but also expose new leak paths. This playbook shows how embedding leakage and query-driven exfiltration happen, and how to stop them with access controls, input scrubbing, monitoring, and adversarial testing.