Definition
A type of access-control failure where the system is meant to let each user see only certain records, but a bug lets documents the user was denied still reach the AI model. The model then quietly talks about data it should never have seen. It breaks the promise that AI follows the same permission rules as the rest of the business.
Why it matters
It can silently leak confidential data into AI answers, creating both a compliance breach and a loss of customer trust.