api-key-exposure
3 live · 13 on record · last incident 3 days ago
Live3
- liveGHSA-v9h7-jj4g-f862: llm API Key Leak Vulnerability
Patch now · Disclosed · Patched · since 11 Nov 2026
LLM version 0.37.2 fixes security advisories where API keys could be accidentally sent to alternative providers due to missing keys or specific model options. The maintainer released a patched version to resolve the issues.
Do:Update to llm 0.37.2.
AI - liveRailway Railway Breach Leads to Stolen AI Keys and $740,000 in Unauthorized Usage
Breaches & attacks · Real loss · since Oct 2026 (approx.)
Customer AI provider keys stored on Railway were stolen during an October breach and exploited to rack up $740,000 in unauthorized usage charges. Railway has committed to covering these costs if providers decline to issue refunds.
Do:Rotate any API keys that were stored on the affected platform.
AI - liveNorthflank Northflank security breach leads to unauthorized use of AI API keys
Breaches & attacks · Real loss · since 31 Oct 2026
Cloud hosting platform Northflank suffered a security breach where attackers accessed stored secrets. The incident resulted in the unauthorized use and exposure of customers' AI API keys.
Do:Rotate all credentials and secrets stored on the Northflank platform.
AI
Earlier10
- closed7.5Nuxt Ollama CVE-2026-59158: Nuxt Ollama exposes cloud API keys in public configuration
Patch now · Disclosed · Patched · since 27 Oct 2026 · CVE-2026-59158
AI - closedOpenCode OpenCode Security Breach Exposes API Keys During Distillation Attacks
Breaches & attacks · Exploited · since 19 Oct 2026
AI - closedOpenCode Console OpenCode Console Breach Exposes Third-Party AI Provider API Keys
Breaches & attacks · Exploited · since 16 Oct 2026
AI - closed5.3Open WebUI CVE-2026-109296: Open WebUI missing authorization exposes disabled model backends
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109296
AI - closed9.3mem0 Mem0 Unauthenticated API Exposes LLM API Keys and Permits SSRF
Patch now · Disclosed · since 7 Jul 2026 · CVE-2026-59706
AI - closed8.7AnythingLLM CVE-2026-24477: AnythingLLM API Key Exposure Vulnerability
Patch now · Disclosed · since 27 Jan 2026 · CVE-2026-24477
AI - closed8.4Dify CVE-2025-67732: API Key Exposure Vulnerability in Dify
Patch now · Disclosed · since 5 Jan 2026 · CVE-2025-67732
AI - closed7.5LiteLLM CVE-2024-9606: LiteLLM reveals portion of API key via logging file
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-9606
AI - closedCommon Crawl Live API Keys Discovered in LLM Training Data Archive
Patch now · Disclosed · since 28 Feb 2025
AI - closed9.8ChuanhuChatGPT CVE-2024-3234: Path Traversal Vulnerability in ChuanhuChatGPT
Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-3234
AI