logo

xAI leaked API key (Research)

ID: 4a66f873-1085-5607-98a5-18177f6d926c

STIX ID: report--4a66f873-1085-5607-98a5-18177f6d926c

Feed Name: Wiz Cloud Threat Landscape

Threat Score
70/100

Date Published: 2025-05-01

Date Updated: 2026-05-01

Author: [email protected] (Wiz Threat Research)

...
...

A security lapse at xAI resulted in an employee publishing a private API key on GitHub that provided access to at least 60 private/unreleased LLMs—including models trained on sensitive internal data from SpaceX, Tesla, and Twitter/X. GitGuardian flagged the exposed credential weeks earlier, but the key remained valid until the issue was escalated to xAI’s security team.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.