{"slug": "how-i-found-a-high-severity-ai-security-issue-on-khan-academy-s-vdp", "title": "How I Found a HIGH-Severity AI Security Issue on Khan Academy's VDP", "summary": "A security researcher discovered a high-severity AI security vulnerability on Khan Academy's Vulnerability Disclosure Program (VDP). The issue involved prompt injection in an AI agent, allowing unauthorized actions. The researcher reported the flaw, and Khan Academy is addressing it.", "body_md": "## 🛠️ Tools & Resources I Use\n\n-\n[Hack The Box VIP](https://amzn.to/4bHackTheBox)— practice environment for recon techniques -\n[YubiKey 5C NFC](https://amzn.to/4bYubiKey)— hardware key for API token security -\n[Free AI Prompt Tester](https://galeops.xyz/tools/prompt-test/)— test your own AI agent for the same bugs\n\n*As an Amazon Associate I earn from qualifying purchases.*\n\n*Originally published on GaleOps Blog.*", "url": "https://wpnews.pro/news/how-i-found-a-high-severity-ai-security-issue-on-khan-academy-s-vdp", "canonical_source": "https://dev.to/galeops/how-i-found-a-high-severity-ai-security-issue-on-khan-academys-vdp-2n1", "published_at": "2026-07-29 20:43:42+00:00", "updated_at": "2026-07-29 21:01:32.114790+00:00", "lang": "en", "topics": ["ai-safety", "ai-agents", "artificial-intelligence"], "entities": ["Khan Academy", "GaleOps"], "alternates": {"html": "https://wpnews.pro/news/how-i-found-a-high-severity-ai-security-issue-on-khan-academy-s-vdp", "markdown": "https://wpnews.pro/news/how-i-found-a-high-severity-ai-security-issue-on-khan-academy-s-vdp.md", "text": "https://wpnews.pro/news/how-i-found-a-high-severity-ai-security-issue-on-khan-academy-s-vdp.txt", "jsonld": "https://wpnews.pro/news/how-i-found-a-high-severity-ai-security-issue-on-khan-academy-s-vdp.jsonld"}}