How Document Search Pipelines Get Poisoned or Leak