Privacy Leakage Analysis in Multilingual RAG Pipelines
August 7, 2026
Testing a Qwen2.5-7B based RAG pipeline across five query languages reveals that English-to-English queries exhibit the highest unstructured PII leak rates. Adding an LLM input judge does not fully mitigate residual leaks in Arabic and Swahili queries.
HOW THIS AFFECTS YOU
●
builderYou should not assume multilingual queries provide a safety buffer for PII in RAG systems.
●
policyThis demonstrates that current two-stage defenses are insufficient for preventing PII leaks in multilingual RAG architectures.