Researchers Find Vulnerability in ChatGPT's Hidden Reasoning, Leaked Passwords

Security researchers discovered a vulnerability in the APIs of OpenAI, Anthropic, and Google that allows extraction of encrypted reasoning traces and transfer between models. A scan of public sessions revealed dozens of passwords and API keys, indicating potential exposure of sensitive user information. Additionally, the traces show that reasoning summaries often conceal what models actually do, raising privacy and transparency concerns.