No Auth Required: How a Healthcare RAG Chatbot Leaked 1,000 Patient Conversations
Researchers used nothing but Chrome DevTools to extract the system prompt, full RAG configuration, knowledge base, and 1,000 stored patient conversations from a live medical chatbot. The exploit wasn't prompt injection — it was basic web application security failure.