API flaw lets researchers read encrypted reasoning of ChatGPT, Claude, and Gemini

研究人员发现可读取ChatGPT等模型加密推理过程的API漏洞

A team led by Alexander Panfilov found an API vulnerability across OpenAI, Anthropic, and Google that exposes the encrypted reasoning of their models. Scanning public sessions turned up dozens of passwords and API keys. The encrypted thought traces are portable across models within a provider—Anthropic's small Haiku 4.5 can transcribe the raw reasoning of the far larger Opus 4.8, and the same trick works on OpenAI and Gemini. Decoding 10,000 traces costs about $720 in API fees, making large-scale extraction cheap. The researchers also found that Kimi-K3 memorizes Claude and GPT reasoning segments up to six orders of magnitude more strongly than the next closest model, suggesting it may have been trained on such traces. Providers previously dismissed side-channel and replay risks; this paper shows that assessment was wrong.

Why it matters: A cross-vendor API vulnerability that exposes encrypted reasoning traces is a concrete security finding with a reproducible method and cross-model validation. Not scoring higher because the post doesn't disclose vendor responses or fix timelines—only the researchers' side so far.