Address OWASP LLM03:2025 Supply Chain + LLM08:2025 Vector and Embedding Weaknesses. Supply Chain risk arises from third-party models + datasets + libraries + frameworks + plugins + tools + agent capabilities + including model poisoning + backdoors + malicious packages + license issues. Vector and Embedding Weaknesses arise from vector database + embedding model usage including unauthorised access to embeddings + embedding inversion attacks + retrieval poisoning + cross-context leakage in shared vector stores. Mitigations include (a) maintain inventory of third-party models + datasets + libraries + tools with provenance verification + (b) scan for vulnerabilities + license issues + malicious content + (c) implement model signing + integrity verification + (d) implement access control + isolation for vector databases + (e) implement embedding access control + prevent unauthorised retrieval + (f) protect against retrieval poisoning via source vetting + (g) implement isolation in multi-tenant vector stores.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.