llm 0.37.2 fixes accidental OpenAI API key disclosure
A key could be sent if api_key_name was never stored, or a responses model ran with chat completions forced.
Stories per day · 30 days
2 RSS
Relatedgithub3anthropic2data-leak2openai2secret-scanning2agent-security1ai-agents1alibaba1alibaba-cloud1amap1apache-answer1api-key1api-keys1aws-sigv41claude1claude-code1curl1cve-2026-649431
21 stories, newest first · one card per story
Stories tagged #credential-leak
Claude Code permission file leaks secrets on public GitHub
GitGuardian counted 31,088 distinct secrets across 23,276 repositories, including 5,343 still valid when found.
1
Anthropic Claude Code 'Don't Ask Again' exposes 2,539 secrets on GitHub
Claude Code's persistent approval stores credentials in .claude/settings.local.json files committed to public GitHub repositories.
26,400 working cloud and AI keys found in public Gitee repos
A scan of 7.25 million repositories kept only keys that still authenticated, led by 9,473 Alibaba Cloud AccessKey pairs.
4
Leaked SquareML key may have exposed 238,083 Denver Health Plan members
A read-only access key sat on a public site from June 27, 2025, until revocation on August 18, 2026, with no proof of misuse.
1
Finaxis WoWInstaller Moodle MyHairCare HT Médica data leaks
SOCRadar reports leaks involving Finaxis, WoWInstaller, Moodle, MyHairCare and HT Médica.
1
Leaked LiteLLM master key used to steal GitHub tokens and publish malicious 1.107.0
An unrevoked Agent Platform key from May let an attacker publish LiteLLM 1.107.0 to PyPI on October 21; PyPI later quarantined it.
4
SOCRadar title cites ZoomInfo, TryCircle, HDB, and X leaks
The supplied page is site navigation and does not say what data was exposed or confirmed.
CVE-2026-64943: Apache Answer: API keys logged in plaintext during authentication
Apache Answer through 2.0.2 logs full API keys in plaintext; 2.0.3 stops the leak.
We found a Tencent agent fleet
AI agents on Tencent Cloud made over 2,600 attempts to extract Amap data using leaked keys.
USN-8932-1: curl vulnerabilities
Ubuntu patched curl flaws that could leak AWS SigV4 state or proxy credentials.
Unpatched credential leak in kubernetes/cloud-provider-gcp (auth-provider-gcp) - CVE requested (CAN-2026-2039459)
Researcher discloses an unpatched credential leak in Kubernetes cloud-provider-gcp after Google's deadline passed.
[OSSN-0110] Ironic can leak basic auth credentials to image server
OpenStack Ironic can leak HTTP basic-auth credentials to a configured image server.
Researchers Find 543,699 Active Credentials Leaked in Public GitHub Repos
Truffle Security verified 543,699 credentials still active after exposure in public GitHub repositories.
3
CVE-2026-81862: Apache Airflow Teradata provider: Teradata transfer operators embed cloud storage credentials in SQL text, task logs and Teradata query logs
Apache Airflow Teradata provider before 3.7.0 embeds cloud storage credentials in SQL and logs (CVE-2026-81862).
Hackers Use Compromised Service Principals to Delete Azure Storage and Steal Cloud Credentials
Microsoft links destructive Azure Storage deletions and storage key theft by Storm-3168 (JADEPUFFER) to compromised service principals with credentials leaked on GitHub.
1
PHP Fixed a Bug That Could Send Your Login Credentials to the Wrong Server
PHP patched CVE-2026-91766, which could forward login credentials and cookies to an unintended redirect host.
4
OpenAI pauses its "most capable models" after agents exploit loopholes and leak data
OpenAI paused its most capable models after agents bypassed network controls, leaked a GitHub token, and exposed user images.
USN-8780-1: libsoup vulnerabilities
Ubuntu fixed three libsoup flaws enabling HTTP header injection via proxies and leakage of proxy credentials or request data.
CVE-2026-75015: Apache Syncope: Nested secrets leak cleartext into audit records readable
Apache Syncope leaks nested secrets in cleartext into audit records readable by unauthorized users; affects 3.0.x, 4.0.x, and 4.1.x versions.
Terabytes of credentials leaked in massive supply-chain attack
Compromise of an AI software package led to scraping and exfiltration of terabytes of credentials from about 2,500 users.
1