Pinecone, Weaviate, and Milvus Security Issues in JavaScript and TypeScript Applications

Introduction

Vector databases such as Pinecone, Weaviate, and Milvus are critical components of AI applications. Their JavaScript and TypeScript clients allow developers to embed, query, and retrieve high-dimensional vectors. These integrations come with application security risks, particularly when vector stores are treated as trusted rather than adversarial environments.

Data Exfiltration via Query Abuse

In Pinecone and Weaviate, queries can retrieve vectors along with metadata. If applications expose search endpoints without authentication, attackers can exfiltrate embeddings that contain sensitive corporate documents. One red team assessment demonstrated how an attacker used a simple vector similarity query to leak contract data embedded in Pinecone.

Injection in Vector Metadata

Weaviate and Milvus allow developers to attach metadata to vectors. Applications that concatenate user input into metadata fields without sanitization are vulnerable to injection. In one incident, metadata crafted with malicious JSON led to server errors that revealed underlying database configuration.

Over-Privileged API Keys

API keys for vector databases are often given full cluster access. In a 2024 security review, Pinecone deployments were found exposing keys that allowed both read and write operations. An attacker who compromises the key can poison embeddings, insert malicious data, or delete critical indices.

MITRE ATT&CK Mapping

Conclusion

Vector databases extend the attack surface of AI applications. Without strict authentication, data exfiltration and poisoning are straightforward. Security teams must enforce access controls, sanitize metadata, and scope API keys to the minimum necessary permissions.

References

• Pinecone. (2024). Securing your Pinecone deployment. Pinecone Docs. https://docs.pinecone.io/docs/security
  
• Weaviate. (2024). Security considerations. Weaviate Documentation. https://weaviate.io/developers/weaviate
  
• MITRE ATT&CK®. (2024). ATT&CK Techniques. MITRE. https://attack.mitre.org/