Security Flaws Across UK Government Sites Exposed ‘God-Tier’ Information
Summary
- A security researcher found over 100 serious vulnerabilities in publicly available UK government code repositories using consumer-grade AI models.
- The Planning Inspectorate accidentally committed active login credentials to GitHub, granting potential god-tier read and write access to SharePoint and OneDrive accounts.
- Additional vulnerabilities were discovered in codebases across the Department of Education, Home Office, Department of Health and Social Care, and a Scottish Government portal.
- Experts emphasize that the exposures stem from poor internal housekeeping rather than inherent flaws in open source publishing policies.
Why it matters
The discovery underscores how readily AI tools can accelerate vulnerability detection in poorly maintained public codebases, highlighting urgent cyber hygiene and credential management risks for government infrastructure.