Unverified50% confidenceFactExact time
Downstream credentials are stored encrypted and are not displayed again after creation, and the client_secret is also shown only once.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/12/2026
First Seen
Valid until: 1/10/2027
Sources
Related Entities
Related Claims
UnverifiedRelic claims that data is sealed with encryption and can only be decoded by the user themselves.73% similarUnverifiedThe root cause of the vulnerability is that encrypted reasoning blocks are portable, and the server does not verify whether a reasoning block belongs to the current user, model, or conversation after decryption.72% similarUnverifiedUnlike passwords, token leaks are often difficult for users to detect, and even if the password is changed afterward, already-leaked tokens can still be abused before they expire.71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1004897API
curl https://kongchang.com/api/v1/knowledge/claims/1004897MCP
get_claim(id=1004897)