Title: Stealing Reasoning Traces from Proprietary LLM APIs (Aug 2026)
Link: http://arxiv.org/abs/2608.09867v1
Date: August 2026
Summary:
This paper describes a vulnerability in client-side encrypted reasoning traces used by proprietary LLM APIs. The authors report that reasoning blocks can be replayed across sessions, users, and—in some cases—different models within the same provider ecosystem. A weaker, less safeguarded model can therefore act as a decryption oracle, transcribing hidden reasoning generated by a more capable model. The paper evaluates this attack across Anthropic, OpenAI, and Google APIs and discusses four abuse scenarios: proprietary reasoning extraction for distillation, recovery of credentials and personally identifiable information from publicly shared traces, disclosure of harmful information hidden in reasoning, and invisible prompt injection through poisoned reasoning blocks. The authors propose server-side state, context-bound authenticated encryption, cross-model isolation, key rotation, replay detection, and model-level refusal training as mitigations. The paper states that providers implemented mitigations after responsible disclosure, making the reported attacks no longer reproducible as of August 2026.
Key Topics:
– LLM security
– Chain-of-thought privacy
– Encrypted reasoning traces
– API vulnerabilities
– Model extraction and distillation
– Cross-session and cross-user replay
– Prompt injection
– Credential and PII leakage
– Jailbreaking
– Authenticated encryption
– Cryptographic context binding
– AI safety and oversight
Chapters:
00:00 – Encrypted Reasoning Vulnerability
01:14 – Stateless API Architecture
03:19 – Cross-Model Replay Attack
04:40 – Decryption Oracle Extraction
05:44 – Distillation Economics
06:40 – Safety Alignment Bypass
08:40 – Credential And PII Leakage
10:45 – Invisible Prompt Injection
11:50 – Distillation Evidence
13:30 – Limits Of Attribution
14:01 – Hallucinated Reasoning Summaries
15:42 – Context-Bound Mitigations
16:48 – Security Interoperability Paradox
17:09 – Final Takeaways
Stock video credits:
– Google DeepMind – https://www.pexels.com/@googledeepmind
– Jakub Zerdzicki – https://www.pexels.com/@jakubzerdzicki
– MrColo – https://www.pexels.com/@mrcolo-12653218
– Pixabay – https://www.pexels.com/@pixabay
– Nicola Narracci – https://www.pexels.com/@nicola-narracci-157460431
– max laurell – https://www.pexels.com/@max-laurell-1958001
– Dima Krivoy – https://www.pexels.com/@dima-krivoy-413413
– Media Hopper Studio – https://www.pexels.com/@media-hopper-studio-328305910
– ALL IZ Well – https://www.pexels.com/@all-iz-well-3182153
– Matias Luge – https://www.pexels.com/@matiasluge
– Mikhail Nilov – https://www.pexels.com/@mikhail-nilov
– BRoll.io – https://www.pexels.com/@brollio
– K – https://www.pexels.com/@kelly
– Kindel Media – https://www.pexels.com/@kindelmedia
– TREEDEO.ST – https://www.pexels.com/@treedeo
– Кирилл Левченко – https://www.pexels.com/@2156561057
– Tima Miroshnichenko – https://www.pexels.com/@tima-miroshnichenko
– Joerg Hartmann – https://www.pexels.com/@joerg-hartmann-626385254
– Max Fischer – https://www.pexels.com/@max-fischer
– Magda Ehlers – https://www.pexels.com/@magda-ehlers-pexels
– Pavel Danilyuk – https://www.pexels.com/@pavel-danilyuk
– Milos Jevtic – https://www.pexels.com/@jevtajevtic7
– Ketut Subiyanto – https://www.pexels.com/@ketut-subiyanto
– www.kaboompics.com – https://www.pexels.com/@karola-g
– Pressmaster – https://www.pexels.com/@pressmaster
– Yaroslav Shuraev – https://www.pexels.com/@yaroslav-shuraev
– Ratan yadav GWR – https://www.pexels.com/@ratan-yadav-gwr-759293078
– Pon Balaji – https://www.pexels.com/@pon-balaji-881701
– cottonbro studio – https://www.pexels.com/@cottonbro
– Chandresh Uike – https://www.pexels.com/@chandresh-uike-754623426
– Soumya – https://www.pexels.com/@soumya-1446957
– Pachon in Motion – https://www.pexels.com/@pachon-in-motion-426015731
– Adis Resic – https://www.pexels.com/@adis-resic-297996969
– Colin Jones – https://www.pexels.com/@larchmedia
– The Instagrapher – https://www.pexels.com/@theinstagrapher
– olia danilevich – https://www.pexels.com/@olia-danilevich
– Tiger Lily – https://www.pexels.com/@tiger-lily
– Stefanie Jockschat – https://www.pexels.com/@stefaniejockschat
– fauxels – https://www.pexels.com/@fauxels
– ROMAN ODINTSOV – https://www.pexels.com/@roman-odintsov
– Vlada Karpovich – https://www.pexels.com/@vlada-karpovich
– Cyriac von Czapiewski – https://www.pexels.com/@cyriac-von-czapiewski-1601520
source
