A newly disclosed security vulnerability allows attackers to exfiltrate large language model weights and sensitive data using standard GET requests. By exploiting this flaw, manipulated models can be tricked into sending their underlying parameters to external servers. This technique highlights a critical risk in current AI deployments and API integrations.