Breaking Lab srl
API Flaw Let Researchers Steal Secrets From AI Reasoning Models

A newly disclosed vulnerability in how OpenAI, Anthropic, and Google handle encrypted reasoning objects allowed researchers to recover internal secrets—including API keys and passwords—by replaying reasoning blocks across sessions.



