TY - RPRT TI - When RAG Chatbots Expose Their Backend: An Anonymized Case Study of Privacy and Security Risks in Patient-Facing Medical AI AU - Alfredo Madrid-GarcĂ­a AU - Miguel Rujas PY - 2026 DO - 10.1056/aip2600583 UR - https://arxiv.org/abs/2605.00796 ID - 2605.00796 ER -