Gitee: 26,400 cloud and AI credentials exposed

Gitee, cloud and AI services

26,400 valid cloud and AI credentials were found exposed in public Gitee repositories, allowing anyone to use them.

Do this now

Rotate the 26,400 exposed cloud and AI credentials found in public Gitee repositories, and check their access logs for misuse.

First seen: 29 Oct 2026
Last update: 29 Oct 2026, 13:17 UTC
Source: news

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## Gitee: 26,400 cloud and AI credentials exposed
Severity: unknown. Patch status: fix status unknown.
Affected: Gitee, cloud and AI services

26,400 valid cloud and AI credentials were found exposed in public Gitee repositories, allowing anyone to use them.

## Steps
1. Search the repo, its CI and infra config for Gitee, cloud and AI services. If present, report the version in use and whether it's affected.
2. No source names a fix yet; check the vendor advisory. Until one ships: restrict network access to it.

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://thehackernews.com/2026/10/26400-valid-cloud-and-ai-credentials.html https://blog.gitee.com/2020/08/17/gitee-gxb/
https://pwned.coffee/i/gitee-26-400-cloud-and-ai-credentials-exposed

Receipt

Exploitation: No known exploitation
Score: No CVSS published yet: severity unknown.
Last checked: 4 Nov 2026, 08:18 UTC

Sources: KEV – CVE record – Vendor –

Sources

Totalone coffee