26,400 Cloud and AI Credentials Exposed in Public Gitee Repositories

# 26,400 Cloud and AI Credentials Exposed in Public Gitee Repositories

https://gcdradar.vercel.app/incidents/26-400-cloud-and-ai-credentials-exposed-in-public-gitee-repo · AIR-2026-1632 · closed 2026-11-12

- Lane: Supply chain
- Severity: 1 (Research / proof of concept): Massive credential leak with no known exploitation yet.
- Fix status: Fix status unknown
- First reported: 2026-10-29 (happened 2026-10-28)
- AI role: No AI role
- Products: Gitee

## Summary

Researcher Ben Zimmermann discovered 26,400 active cloud and AI service credentials leaked in public Gitee repositories. The exposed keys could be used by anyone to access the associated services.

## What to do

Remove exposed credentials from public repositories and rotate them.

## Latest updates

- 2026-10-29: 26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories (https://thehackernews.com/2026/10/26400-valid-cloud-and-ai-credentials.html)

## Sources

- 2026-10-29 The Hacker News: 26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories https://thehackernews.com/2026/10/26400-valid-cloud-and-ai-credentials.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.