Published findings
Public disclosures.
Findings we have published after the vendor had notice under our disclosure policy. Held findings stay on the register until their publication date.
| ID | Vendor and product | Finding | Reported | Fix | Published |
|---|---|---|---|---|---|
DSK-1 | DeepSeek DeepSeek Harness (dsh) | Sends your session, including tool results and the contents of files it reads, to DeepSeek by default; the telemetry switch does not stop it. Differs from DeepSeek's Data Processing Statement. Updated 26 Oct 2026. Read the note → | 26 Sep 2026 | Off switch added in web app, 28 Sep; upload still on by default | 8 Oct 2026 |
XAI-1 | xAI Grok Build CLI | With telemetry on and a third-party model, sends that model API key to api.x.ai as the bearer; the binary carries upload code the published source does not. Read the note → | 26 Sep 2026 | No reply | 26 Oct 2026 |
AID-1 | Aider maintainers Aider | At end of input (for example < /dev/null) answers yes to the Run shell command? prompt, so unattended runs execute model-proposed shell commands; --yes-always refuses them. Read the note → | 26 Sep 2026 | No reply | 26 Oct 2026 |
QWN-1 | Qwen Qwen Code | Tells API-key users it collects nothing extra, but by default sends Alibaba Cloud a persistent installation ID, your model and your provider address; the telemetry switch does not stop it. Read the note → | 27 Sep 2026 | No reply; unchanged in 0.25.3 (19 Oct) | 27 Oct 2026 |
CUR-1 | Cursor Cursor CLI | Documentation says terminal commands need your approval by default, but the first-start config allowlists Shell(ls); a Shell(python3) deny rule did not stop the agent running the interpreter another way. Read the note → | 27 Sep 2026 | Automated HackerOne notice only; no substantive reply | 27 Oct 2026 |
GEM-1 | Google Gemini CLI | Its documentation calls the usage statistics anonymized, but by default they carry a persistent installation ID and host hardware details, and the ID is sent with your API key on every model request. Read the note → | 27 Sep 2026 | Automated notice only; no substantive reply | 27 Oct 2026 |