# Security Vulnerability in Gemini 2.5 Pro **URL:** \ **Category:** Gemini API\ **Tags:** models, gemini\ **Created:** [September 27, 2026, 12:07am UTC](https://discuss.ai.google.dev/t/security-vulnerability-in-gemini-2-5-pro/185150 "2026-09-27T00:07:46Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![cs-oolong](https://d1dlmcr85iqnpo.cloudfront.net/user_avatar/discuss.ai.google.dev/cs-oolong/32/153201_2.png) [@cs-oolong](https://discuss.ai.google.dev/u/cs-oolong)\ **Post date:** [September 27, 2026, 12:07am UTC](https://discuss.ai.google.dev/t/security-vulnerability-in-gemini-2-5-pro/185150/1 "2026-09-27T00:07:46Z")
I am a security researcher and during my experiments I found a vulnerability in Gemini 2.5 Pro. It has been fixed on Gemini 3 (I tested it for comparison), but it results in a successful jailbreak roughly 50% of the time in Gemini 2.5 Pro, which as far as I know is available to old users and in other AI aggregators such as OpenRouter (which is where I tested it). Basically if you use a fake markup you convince the model to output NSFW sexually explicit content, or exfiltrate a secret string from the system prompt (capture-the-flag style). More details here: [https://drive.google.com/file/d/1eQMf48oZcCSYS0oBKwC3V-59p6hSJ-AT/view?usp=sharing](https://drive.google.com/file/d/1eQMf48oZcCSYS0oBKwC3V-59p6hSJ-AT/view?usp=sharing) I tried sending to the Google Bug Bounty as it is security related, but it says it’s out of scope, so I’m reporting here instead as an alternative so that it reaches Gemini team and they decide the best course of action. ---
**Author:** ![Rime](https://d1dlmcr85iqnpo.cloudfront.net/user_avatar/discuss.ai.google.dev/rime/32/151463_2.png) [@Rime](https://discuss.ai.google.dev/u/Rime)\ **Post date:** [September 27, 2026, 3:37pm UTC](https://discuss.ai.google.dev/t/security-vulnerability-in-gemini-2-5-pro/185150/2 "2026-09-27T15:37:08Z")
Hello, can you still use Gemini 2.5 pro so far? ---
**Author:** ![cs-oolong](https://d1dlmcr85iqnpo.cloudfront.net/user_avatar/discuss.ai.google.dev/cs-oolong/32/153201_2.png) [@cs-oolong](https://discuss.ai.google.dev/u/cs-oolong)\ **Post date:** [September 27, 2026, 11:16pm UTC](https://discuss.ai.google.dev/t/security-vulnerability-in-gemini-2-5-pro/185150/3 "2026-09-27T23:16:42Z")
Hi, I can but just if I use it through OpenRouter. When I created my Google Cloud account, it said that Gemini 2.5 Pro isn’t available to new users. Maybe if your Google Cloud account is older than mine you will still be able to use it from Google’s API? ---
**Author:** ![Rime](https://d1dlmcr85iqnpo.cloudfront.net/user_avatar/discuss.ai.google.dev/rime/32/151463_2.png) [@Rime](https://discuss.ai.google.dev/u/Rime)\ **Post date:** [October 2, 2026, 3:49am UTC](https://discuss.ai.google.dev/t/security-vulnerability-in-gemini-2-5-pro/185150/4 "2026-10-02T03:49:27Z")
Thanks for explaining! I registered as a Pro user in 2025, yet I can’t access 2.5 Pro on AIStudio now​🥹