A newly discovered flaw in the API implementations of OpenAI, Anthropic, and Google allowed researchers to recover internal reasoning and secrets, including API keys and passwords, from session logs. The vulnerability involved replaying encrypted reasoning objects from one session into another. This highlights a significant security risk in how AI models handle and protect sensitive internal data during API interactions.