AINewsnow

PSA: DeepSeek V4.1 Flash habitually exfiltrates API keys. It is dangerously misaligned and may be hazardous to use

This story is from 2026-10-11. It is preserved in the archive; the latest stories are on the live feed.

EDIT: since people keep calling it out, this is API key abuse but not exfiltration. Seems like both Harbor and Pier (sandboxes used in almost every Software Engineering benchmark) expose the Openrouter endpoint and API key to models, even though they block the rest of the internet. Only DeepSeek V4…

Read the full story at r/LocalLLaMA ↗

Timeline · 3 reports

  1. 2026-10-11 15:27 · r/LocalLLM
    Minisforum MS-S1 MAX P495 (Ryzen AI Max+ PRO 495, 192GB) llama.cpp Vulkan benchmarks: gpt-oss 120B, MiniMax M2.7, DeepSeek V4 Flash, Qwen3 Coder 30B, Qwen3.8 27B
  2. 2026-10-11 08:44 · r/singularity
    PSA: DeepSeek V4.1 Flash habitually exfiltrates API keys. It is dangerously misaligned and may be hazardous to use
  3. 2026-10-11 08:29 · r/LocalLLaMA
    PSA: DeepSeek V4.1 Flash habitually exfiltrates API keys. It is dangerously misaligned and may be hazardous to use

More stories

  1. Lenovo's TianxiCode Agent and DeepSeek-V4.1-Flash Top SWE-bench-Live Lite at 71%, Verified — Pandaily
  2. three LLMs kept their own notes across 324 chess games. they still lose a piece around move 13 — r/ArtificialInteligence
  3. comfy noob, whats a good local/open source llm to start off with? — r/comfyui
  4. Suggestion for llama.cpp configuration — r/LocalLLM
  5. One API key for Claude, GPT, Gemini, Grok, DeepSeek, FLUX and Veo — DEV Community — AI
  6. Qwen3.6 35B-A3B optimized for a 4 GB GTX 1050 Ti Mobile: up to 2× prefill and 3× decode vs llama.cpp — r/LocalLLM
  7. Benchmarked 4 Local Models on 3 Harnesses — r/LocalLLM
  8. What local AI and software do you use? Which is best? — r/LocalLLM

Get the daily brief of stories like this at 6:30 every morning →