What Users See Is Not What Models Read: Split-View PDFs in Document-to-LLM Supply Chains
Document-to-LLM pipelines fail because PDF rendering and text extraction happen separately, creating 'split-view PDFs.' This allows hidden, attacker-controlled text to be consumed by AI models while remaining invisible to the human user. The research identifies 25 specific extraction gaps across four categories, proving that deployment paths and ingestion stacks dictate which vulnerabilities are exposed.