{"id":"https://openalex.org/W7152110169","doi":"https://doi.org/10.48550/arxiv.2604.05480","title":"Can You Trust the Vectors in Your Vector Database? Black-Hole Attack from Embedding Space Defects","display_name":"Can You Trust the Vectors in Your Vector Database? Black-Hole Attack from Embedding Space Defects","publication_year":2026,"publication_date":"2026-04-07","ids":{"openalex":"https://openalex.org/W7152110169","doi":"https://doi.org/10.48550/arxiv.2604.05480"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.05480","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.05480","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.05480","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133171266","display_name":"Hanxi Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Hanxi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101725631","display_name":"Jianan Zhou","orcid":"https://orcid.org/0000-0002-4896-148X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Jianan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044736090","display_name":"Jiale Lao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lao, Jiale","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133182900","display_name":"Yibo Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yibo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133220164","display_name":"Zhengmao Ye","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ye, Zhengmao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133221997","display_name":"Yang Cao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cao, Yang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133167846","display_name":"Junfen Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Junfen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133156047","display_name":"Mingjie Tang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tang, Mingjie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.1867000013589859,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.1867000013589859,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.17640000581741333,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.11999999731779099,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/centroid","display_name":"Centroid","score":0.781000018119812},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.7750999927520752},{"id":"https://openalex.org/keywords/vector-space","display_name":"Vector space","score":0.5404000282287598},{"id":"https://openalex.org/keywords/space","display_name":"Space (punctuation)","score":0.48069998621940613},{"id":"https://openalex.org/keywords/vector","display_name":"Vector (molecular biology)","score":0.34310001134872437},{"id":"https://openalex.org/keywords/unit-vector","display_name":"Unit vector","score":0.337799996137619}],"concepts":[{"id":"https://openalex.org/C146599234","wikidata":"https://www.wikidata.org/wiki/Q511093","display_name":"Centroid","level":2,"score":0.781000018119812},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.7750999927520752},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.603600025177002},{"id":"https://openalex.org/C13336665","wikidata":"https://www.wikidata.org/wiki/Q125977","display_name":"Vector space","level":2,"score":0.5404000282287598},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.48069998621940613},{"id":"https://openalex.org/C92087593","wikidata":"https://www.wikidata.org/wiki/Q427389","display_name":"Vector (molecular biology)","level":4,"score":0.34310001134872437},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3393999934196472},{"id":"https://openalex.org/C84316537","wikidata":"https://www.wikidata.org/wiki/Q36255","display_name":"Unit vector","level":2,"score":0.337799996137619},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.303600013256073},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.29490000009536743},{"id":"https://openalex.org/C177292542","wikidata":"https://www.wikidata.org/wiki/Q440959","display_name":"Vector map","level":2,"score":0.2919999957084656},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.29179999232292175},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2757999897003174},{"id":"https://openalex.org/C16345878","wikidata":"https://www.wikidata.org/wiki/Q107472979","display_name":"Orientation (vector space)","level":2,"score":0.274399995803833},{"id":"https://openalex.org/C551230270","wikidata":"https://www.wikidata.org/wiki/Q4368942","display_name":"Data retrieval","level":2,"score":0.2703999876976013},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.26510000228881836},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2635999917984009},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.257099986076355}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.05480","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.05480","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.05480","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.05480","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Vector":[0],"databases":[1,202],"serve":[2],"as":[3],"the":[4,19,34,38,54,78,173],"retrieval":[5,56,119,165],"backbone":[6],"of":[7,30,37,83,88,143,153,207],"modern":[8],"AI":[9],"applications,":[10],"yet":[11],"their":[12],"security":[13],"remains":[14,192],"largely":[15],"unexplored.":[16],"We":[17],"propose":[18,127],"Black-Hole":[20],"Attack,":[21],"a":[22,27,47,66,84,106],"poisoning":[23],"attack":[24,62,101,129,180],"that":[25,103,139,200],"injects":[26],"small":[28],"number":[29,87],"malicious":[31],"vectors":[32,43,76,104],"near":[33,77],"geometric":[35,113],"center":[36],"stored":[39],"vectors.":[40],"These":[41],"injected":[42],"attract":[44],"queries":[45,144],"like":[46],"black":[48],"hole":[49],"and":[50,157,188,196],"frequently":[51],"appear":[52],"in":[53,72,98,105,115],"top-k":[55],"results":[57],"for":[58],"most":[59],"queries.":[60],"This":[61],"is":[63,95,176],"enabled":[64],"by":[65],"phenomenon":[67],"we":[68,126,149],"term":[69],"centrality-driven":[70],"hubness:":[71],"high-dimensional":[73,116],"embedding":[74],"spaces,":[75],"centroid":[79,93],"become":[80],"nearest":[81],"neighbors":[82],"disproportionately":[85],"large":[86],"other":[89],"vectors,":[90],"while":[91,172],"this":[92,124],"region":[94],"nearly":[96],"empty":[97],"practice.":[99],"The":[100],"shows":[102],"vector":[107,201],"database":[108],"cannot":[109],"be":[110],"blindly":[111],"trusted:":[112],"defects":[114],"embeddings":[117],"make":[118],"inherently":[120],"vulnerable.":[121],"Based":[122],"on":[123],"insight,":[125],"four":[128],"paths":[130,181],"tailored":[131],"to":[132,141],"different":[133],"attacker":[134],"capabilities.":[135],"Our":[136],"experiments":[137],"show":[138],"up":[140],"94.4%":[142],"are":[145],"successfully":[146],"attacked.":[147],"Additionally,":[148],"study":[150],"two":[151],"directions":[152],"defense:":[154],"hubness":[155],"mitigation":[156,161],"detection-based":[158,174],"filtering.":[159],"Hubness":[160],"either":[162],"significantly":[163],"reduces":[164],"accuracy":[166],"or":[167],"provides":[168],"only":[169],"limited":[170],"protection,":[171],"defense":[175,190],"effective":[177],"against":[178,184],"some":[179],"but":[182],"fails":[183],"others.":[185],"A":[186],"robust":[187],"adaptive":[189],"thus":[191],"an":[193],"open":[194],"problem,":[195],"our":[197],"findings":[198],"indicate":[199],"require":[203],"more":[204],"careful":[205],"treatment":[206],"security.":[208]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-09T00:00:00"}