and practically, this is bad for vector databases. this means that even if you fine-tune your own model, and keep the model secret, someone with access to embeddings alone can decode their text embedding inversion without model access
Embedding Inversion Threat: Decoding Text Without Model Access
By
–
