CVE-2026-40217: Stolen AI access keys can cost over $100,000 in a single day, Google warns

Not listed so far in CISA’s catalog of actively exploited vulnerabilities.

Our analyses

Stolen AI access keys can cost over $100,000 in a single day, Google warns

Investigators at Google's Mandiant describe hackers who steal enterprise AI access and services that resell it at bargain prices. Here are the settings to change now.

Nov 4, 20263 min read

What to do

Check whether your estate includes the affected product, including internet-facing devices.
Apply the vendor’s patch or mitigations (references below).
Watch for exploitation: this entry is updated if the vulnerability enters the exploited catalog or is the subject of a CERT-FR alert.

References

NVD entry (NIST)