How Devin AI Can Leak Your Secrets via Multiple Means

<a id="top_ref"></a>

<p>In this post we show how an attacker can make Devin send sensitive information to third-party servers, via multiple means. This post assumes that you read the <a href="https://embracethered.com/blog/posts/2025/devin-i-spent-usd500-to-hack-devin/">first post</a> about Devin as well.</p> <p><a href="https://embracethered.com/blog/images/2025/episode7-yt.png"><img alt="Devin