| 9 Nov 2026 | NEAR AI discloses SGLang remote code execution intrusion exposing data on about 100 users
NEAR AI | Leaky AI product | Medium |
| 5 Nov 2026 | Researchers bypassed ChatGPT Lockdown Mode to exfiltrate chat history, now fixed
OpenAI | Leaky AI product | Low |
| 29 Oct 2026 | Researchers found embedded browser flaws in five desktop AI coding assistants
Multiple | Leaky AI product | Low |
| 26 Oct 2026 | Cloudflare Workers AI model returned fragments of other customers' requests in 155 responses
Cloudflare | Leaky AI product | Low |
| 22 Oct 2026 | 302.AI aggregator left Azure storage with 17.6 million files and chat logs publicly accessible
302.AI (Univerads Technology) | Leaky AI product | Medium |
| 7 Oct 2026 | PoeLLM malware compromised thousands of exposed AI servers for cryptomining
Multiple | Leaky AI product | High |
| 2 Oct 2026 | GitLab patched a critical sandbox escape in its self-hosted AI Gateway
GitLab | Leaky AI product | Low |
| 2 Oct 2026 | AWS fixed authentication and token flaws in its open-source Loom agent platform
Amazon Web Services | Leaky AI product | Low |
| 18 Sep 2026 | Z.ai's ZCode coding assistant silently uploaded users' workspaces to cloud storage
Z.ai (ZCode users) | Leaky AI product | Low |
| 15 Sep 2026 | Researchers found two sandbox-escape flaws in OpenAI's Codex coding agent
OpenAI | Leaky AI product | Low |
| 19 Aug 2026 | ClarityCheck left 9 million facial recognition images exposed
ClarityCheck | Leaky AI product | High |
| Jun 2026 | Meta's AI support tool abused to hijack 20,000 Instagram accounts
Meta (Instagram) | Leaky AI product | Medium |
| 31 Mar 2026 | Anthropic accidentally published Claude Code's full source code to npm
Anthropic | Leaky AI product | Medium |
| 17 Mar 2026 | Sears Home Services AI chatbot databases exposed 3.7 million records
Sears Home Services | Leaky AI product | High |
| 17 Mar 2026 | Langflow AI pipeline RCE flaws exploited in the wild, added to CISA KEV
Multiple | Leaky AI product | High |
| 9 Mar 2026 | McKinsey's internal AI platform Lilli exposed via SQL injection
McKinsey & Company | Leaky AI product | Medium |
| 5 Feb 2026 | Chat & Ask AI app exposed 300 million chatbot messages
Codeway | Leaky AI product | High |
| 2 Feb 2026 | OpenClaw AI agent one-click RCE with 40,000+ exposed instances
OpenClaw users | Leaky AI product | Low |
| Feb 2026 | Vibe-coded AI agent network Moltbook exposed 1.5M API tokens
Moltbook | Leaky AI product | High |
| 18 Nov 2025 | ShadowRay 2.0: attackers hijacked exposed Ray AI clusters into a botnet
Multiple | Leaky AI product | High |
| 9 Oct 2025 | Two AI companion apps streamed 43 million intimate messages from an open server
Imagime Interactive (Chattee Chat, GiMe Chat) | Leaky AI product | High |
| 11 Sep 2025 | Vyro AI's image apps streamed prompts and login tokens from an open server
Vyro AI | Leaky AI product | High |
| 20 Aug 2025 | Grok's share button published 370,000 conversations to search engines
xAI | Leaky AI product | Medium |
| 31 Jul 2025 | Shared ChatGPT conversations showed up in Google search results
OpenAI | Leaky AI product | Medium |
| Jul 2025 | McDonald's AI hiring chatbot exposed up to 64 million applicants via password '123456'
McDonald's (Paradox.ai) | Leaky AI product | High |
| 18 Jun 2025 | Asana's AI connector exposed customer data to other organizations
Asana | Leaky AI product | High |
| 31 Mar 2025 | AI image generator GenNomis exposed prompts and generated images
GenNomis (AI-Nomis) | Leaky AI product | Medium |
| 29 Jan 2025 | DeepSeek left a database of chat logs and API keys open to the internet
DeepSeek | Leaky AI product | High |