AI coding assistants expose sensitive data and vLLM suffers denial of service
The week in numbers
- incidents
- 2
- +1 (+100%) vs 2026-W39
- real-world
- 2
- +1 vs 2026-W39 · severity 3–4
- attacks on AI
- 1
- AI-enabled attacks
- 1
- busiest family
- 1
- Infrastructure vulnerabilities
- top targets
- Framework / tooling 1 · Enterprise deployment 1
- disclosed CVEs
- 10
- −49 vs 2026-W39 · not counted as incidents
Counted from records first reported this week, as of 2026-10-19 06:33Z. Records found later are not added to a briefing; the dashboard recounts from the data and may show more.
The week
The week had 2 incidents, up 1 from 1, including 2 real-world incidents, up 1 from 1. In the notable incidents, AI coding assistants improperly published over 13,000 internal images and sensitive documents from hundreds of organizations to public GitHub repositories, exposing data that included customer billing records and unreleased product features. Additionally, a flaw in vLLM allowed remote attackers to cause a denial of service via a vulnerability in the Gemma4 parser, for which an exploit was published. The week also had 10 disclosed vulnerabilities, down 49 from 59.
Written by a language model (gemini-3.5-flash-lite) from this week’s records only, and checked against the numbers above. Read the incident pages for the sources.
Most notable incidents
- 1AI Coding Agents Exposed Internal Images and Data on Public GitHub Repos4 Real lossby AIData leak2026-09-29 · 1 source
- 2CVE-2026-103241: Denial of service vulnerability in vLLM3 Exploitedon AIInfra vuln2026-09-30 · 1 source
Highest severity first, then most sources. Disclosed CVEs are left out of this list.
Cite this
GCD AI RADAR, “This week in AI security, 2026-W40”, https://gcd-ai-radar.vercel.app/briefing/2026-W40, 2026-10-19.