{"id":1939,"date":"2026-08-17T07:28:29","date_gmt":"2026-08-17T00:28:29","guid":{"rendered":"https:\/\/vncybers.vn\/hieu-ve-lo-hong-api-suy-luan-ai-reasoning-an-lo-bi-mat\/"},"modified":"2026-08-17T07:31:36","modified_gmt":"2026-08-17T00:31:36","slug":"hieu-ve-lo-hong-api-suy-luan-ai-reasoning-an-lo-bi-mat","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/hieu-ve-lo-hong-api-suy-luan-ai-reasoning-an-lo-bi-mat\/","title":{"rendered":"Hi\u1ec3u v\u1ec1 l\u1ed7 h\u1ed5ng API suy lu\u1eadn AI: Khi reasoning \u1ea9n c\u00f3 th\u1ec3 l\u00e0m l\u1ed9 b\u00ed m\u1eadt"},"content":{"rendered":"

M\u1ed9t nghi\u00ean c\u1ee9u m\u1edbi v\u1ec1 b\u1ea3o m\u1eadt API m\u00f4 h\u00ecnh ng\u00f4n ng\u1eef l\u1edbn cho th\u1ea5y c\u00e1c kh\u1ed1i reasoning<\/strong> \u1ea9n, v\u1ed1n \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 duy tr\u00ec tr\u1ea1ng th\u00e1i suy lu\u1eadn gi\u1eefa nhi\u1ec1u l\u01b0\u1ee3t g\u1ecdi API, c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh \u0111i\u1ec3m r\u00f2 r\u1ec9 d\u1eef li\u1ec7u n\u1ebfu b\u1ecb ghi l\u1ea1i v\u00e0 chia s\u1ebb nguy\u00ean tr\u1ea1ng trong log c\u00f4ng khai.<\/p>\n

The Hacker News d\u1eabn nghi\u00ean c\u1ee9u Stealing Reasoning Traces from Proprietary LLM APIs<\/em> cho bi\u1ebft \u0111i\u1ec3m y\u1ebfu t\u1eebng \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn c\u00e1ch OpenAI, Anthropic v\u00e0 Google x\u1eed l\u00fd c\u00e1c \u0111\u1ed1i t\u01b0\u1ee3ng suy lu\u1eadn \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a. Trong th\u1eed nghi\u1ec7m, m\u1ed9t kh\u1ed1i reasoning \u0111\u01b0\u1ee3c t\u1ea1o \u1edf phi\u00ean n\u00e0y c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c ph\u00e1t l\u1ea1i \u1edf phi\u00ean kh\u00e1c, th\u1eadm ch\u00ed \u0111\u01b0\u1ee3c \u0111\u01b0a cho m\u1ed9t m\u00f4 h\u00ecnh y\u1ebfu h\u01a1n nh\u01b0ng t\u01b0\u01a1ng th\u00edch trong c\u00f9ng h\u1ecd m\u00f4 h\u00ecnh \u0111\u1ec3 kh\u00f4i ph\u1ee5c ph\u1ea7n n\u1ed9i dung \u1ea9n.<\/p>\n

\"Minh<\/p>\n

V\u00ec sao reasoning \u1ea9n c\u00f3 th\u1ec3 th\u00e0nh r\u1ee7i ro<\/h2>\n

C\u00e1c API reasoning hi\u1ec7n \u0111\u1ea1i th\u01b0\u1eddng cho ph\u00e9p \u1ee9ng d\u1ee5ng t\u1ef1 qu\u1ea3n l\u00fd l\u1ecbch s\u1eed h\u1ed9i tho\u1ea1i theo ki\u1ec3u stateless. \u0110\u1ec3 m\u00f4 h\u00ecnh kh\u00f4ng m\u1ea5t m\u1ea1ch suy ngh\u0129, nh\u00e0 cung c\u1ea5p c\u00f3 th\u1ec3 tr\u1ea3 v\u1ec1 m\u1ed9t \u0111\u1ed1i t\u01b0\u1ee3ng opaque, ch\u1eb3ng h\u1ea1n encrypted reasoning item, signature ho\u1eb7c thought signature, r\u1ed3i y\u00eau c\u1ea7u \u1ee9ng d\u1ee5ng g\u1eedi l\u1ea1i \u0111\u1ed1i t\u01b0\u1ee3ng \u0111\u00f3 trong l\u01b0\u1ee3t g\u1ecdi ti\u1ebfp theo.<\/p>\n

V\u1ec1 nguy\u00ean t\u1eafc, n\u1ed9i dung b\u00ean trong kh\u00f4ng \u0111\u01b0\u1ee3c hi\u1ec3n th\u1ecb tr\u1ef1c ti\u1ebfp cho nh\u00e0 ph\u00e1t tri\u1ec3n. Tuy nhi\u00ean, v\u1ea5n \u0111\u1ec1 n\u1eb1m \u1edf kh\u1ea3 n\u0103ng t\u00e1i s\u1eed d\u1ee5ng: n\u1ebfu \u0111\u1ed1i t\u01b0\u1ee3ng opaque \u0111\u01b0\u1ee3c ch\u1ea5p nh\u1eadn \u1edf phi\u00ean, t\u00e0i kho\u1ea3n ho\u1eb7c m\u00f4 h\u00ecnh kh\u00e1c, n\u00f3 c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh m\u1ed9t d\u1ea1ng d\u1eef li\u1ec7u di \u0111\u1ed9ng m\u00e0 h\u1ec7 th\u1ed1ng nh\u1eadn v\u1eabn x\u1eed l\u00fd nh\u01b0 ng\u1eef c\u1ea3nh h\u1ee3p l\u1ec7.<\/p>\n

Nh\u1eefng g\u00ec nh\u00f3m nghi\u00ean c\u1ee9u ch\u1ee9ng minh<\/h2>\n

Nh\u00f3m nghi\u00ean c\u1ee9u m\u00f4 t\u1ea3 b\u1ed1n h\u01b0\u1edbng l\u1ea1m d\u1ee5ng ch\u00ednh: \u0111\u00e1nh c\u1eafp reasoning \u0111\u1ed9c quy\u1ec1n \u0111\u1ec3 h\u1ed7 tr\u1ee3 ch\u01b0ng c\u1ea5t m\u00f4 h\u00ecnh, tr\u00edch xu\u1ea5t d\u1eef li\u1ec7u ri\u00eang t\u01b0 t\u1eeb c\u00e1c trace c\u00f4ng khai, kh\u00f4i ph\u1ee5c n\u1ed9i dung nguy h\u1ea1i b\u1ecb che ph\u00eda sau c\u00e2u tr\u1ea3 l\u1eddi an to\u00e0n, v\u00e0 gi\u1ea5u ch\u1ec9 th\u1ecb prompt injection b\u00ean trong kh\u1ed1i reasoning kh\u00f4ng hi\u1ec3n th\u1ecb.<\/p>\n

Trong t\u1eadp 6.708 trajectory c\u00f4ng khai c\u1ee7a agent, nh\u00f3m \u0111\u00e3 gi\u1ea3i m\u00e3 315.320 thinking block. Sau khi lo\u1ea1i tr\u1eeb ngu\u1ed3n benchmark, nghi\u00ean c\u1ee9u ghi nh\u1eadn 704 artifact ri\u00eang t\u01b0 t\u1eeb phi\u00ean ng\u01b0\u1eddi d\u00f9ng th\u1eadt, bao g\u1ed3m 62 API key, 33 m\u1eadt kh\u1ea9u, 24 access token v\u00e0 7 private key. \u0110\u00e1ng ch\u00fa \u00fd, 64 artifact ch\u1ec9 xu\u1ea5t hi\u1ec7n trong reasoning \u1ea9n m\u00e0 kh\u00f4ng c\u00f3 trong ph\u1ea7n h\u1ed9i tho\u1ea1i nh\u00ecn th\u1ea5y \u0111\u01b0\u1ee3c.<\/p>\n

R\u1ee7i ro kh\u00f4ng \u0111\u1ed3ng ngh\u0129a v\u1edbi m\u1ecdi cu\u1ed9c tr\u00f2 chuy\u1ec7n b\u1ecb l\u1ed9<\/h2>\n

Nghi\u00ean c\u1ee9u kh\u00f4ng n\u00f3i r\u1eb1ng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 truy c\u1eadp t\u00f9y \u00fd v\u00e0o m\u1ecdi cu\u1ed9c tr\u00f2 chuy\u1ec7n ri\u00eang t\u01b0. \u0110i\u1ec1u ki\u1ec7n quan tr\u1ecdng l\u00e0 ph\u1ea3i c\u00f3 \u0111\u01b0\u1ee3c kh\u1ed1i reasoning \u0111\u00e3 b\u1ecb xu\u1ea5t b\u1ea3n ho\u1eb7c l\u01b0u trong log, c\u00f9ng quy\u1ec1n g\u1ecdi API t\u1edbi m\u00f4 h\u00ecnh t\u01b0\u01a1ng th\u00edch. V\u00ec v\u1eady, nh\u00f3m c\u00f3 r\u1ee7i ro r\u00f5 nh\u1ea5t l\u00e0 c\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n, \u0111\u1ed9i nghi\u00ean c\u1ee9u ho\u1eb7c d\u1ef1 \u00e1n agent c\u00f4ng khai raw transcript m\u00e0 v\u1eabn gi\u1eef nguy\u00ean tr\u01b0\u1eddng reasoning.<\/p>\n

The Hacker News c\u0169ng l\u01b0u \u00fd ch\u01b0a c\u00f3 b\u1eb1ng ch\u1ee9ng c\u00f4ng khai v\u1ec1 vi\u1ec7c \u0111i\u1ec3m y\u1ebfu n\u00e0y b\u1ecb khai th\u00e1c trong th\u1ef1c t\u1ebf. Nh\u00f3m nghi\u00ean c\u1ee9u cho bi\u1ebft c\u00e1c \u0111\u01b0\u1eddng t\u1ea5n c\u00f4ng ch\u00ednh \u0111\u00e3 kh\u00f4ng c\u00f2n t\u00e1i l\u1eadp \u0111\u01b0\u1ee3c sau khi b\u00e1o c\u00e1o cho c\u00e1c b\u00ean li\u00ean quan, nh\u01b0ng ch\u01b0a c\u00f3 x\u00e1c nh\u1eadn c\u00f4ng khai chi ti\u1ebft t\u1eeb t\u1ea5t c\u1ea3 nh\u00e0 cung c\u1ea5p.<\/p>\n

B\u00e0i h\u1ecdc cho \u0111\u1ed9i ph\u00e1t tri\u1ec3n d\u00f9ng LLM API<\/h2>\n

Th\u00f4ng \u0111i\u1ec7p th\u1ef1c t\u1ebf kh\u00f4ng ph\u1ea3i l\u00e0 ng\u1eebng d\u00f9ng reasoning model, m\u00e0 l\u00e0 xem c\u00e1c tr\u01b0\u1eddng reasoning opaque nh\u01b0 d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m. Khi chia s\u1ebb log, m\u1edf m\u00e3 ngu\u1ed3n demo agent, g\u1eedi transcript cho b\u00ean th\u1ee9 ba ho\u1eb7c l\u01b0u l\u1ed7i v\u00e0o h\u1ec7 th\u1ed1ng quan s\u00e1t, c\u1ea7n lo\u1ea1i b\u1ecf c\u00e1c kh\u1ed1i reasoning, signature, thought signature v\u00e0 m\u1ecdi tr\u01b0\u1eddng metadata c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c ph\u00e1t l\u1ea1i.<\/p>\n

C\u00e1c t\u1ed5 ch\u1ee9c c\u0169ng n\u00ean ki\u1ec3m tra pipeline logging c\u1ee7a \u1ee9ng d\u1ee5ng AI: log gateway, trace agent, b\u1ea3n ghi CI\/CD, notebook nghi\u00ean c\u1ee9u v\u00e0 kho d\u1eef li\u1ec7u h\u1ed7 tr\u1ee3 \u0111\u00e1nh gi\u00e1 m\u00f4 h\u00ecnh. Vi\u1ec7c ch\u1ec9 x\u00f3a ph\u1ea7n v\u0103n b\u1ea3n nh\u00ecn th\u1ea5y trong h\u1ed9i tho\u1ea1i c\u00f3 th\u1ec3 ch\u01b0a \u0111\u1ee7 n\u1ebfu kh\u1ed1i reasoning \u1ea9n v\u1eabn n\u1eb1m nguy\u00ean trong JSON.<\/p>\n

Conclusion<\/h2>\n

V\u1ee5 vi\u1ec7c cho th\u1ea5y b\u1ea3o m\u1eadt \u1ee9ng d\u1ee5ng AI kh\u00f4ng ch\u1ec9 n\u1eb1m \u1edf prompt, output hay quy\u1ec1n truy c\u1eadp API. Nh\u1eefng th\u00e0nh ph\u1ea7n t\u01b0\u1edfng nh\u01b0 n\u1ed9i b\u1ed9, \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a v\u00e0 kh\u00f4ng hi\u1ec3n th\u1ecb v\u1edbi ng\u01b0\u1eddi d\u00f9ng, v\u1eabn c\u00f3 th\u1ec3 t\u1ea1o r\u1ee7i ro n\u1ebfu v\u00f2ng \u0111\u1eddi d\u1eef li\u1ec7u kh\u00f4ng \u0111\u01b0\u1ee3c ki\u1ec3m so\u00e1t. V\u1edbi doanh nghi\u1ec7p \u0111ang tri\u1ec3n khai agent v\u00e0 workflow d\u00f9ng LLM, ch\u00ednh s\u00e1ch t\u1ed1i thi\u1ec3u n\u00ean l\u00e0 kh\u00f4ng c\u00f4ng khai raw trace, kh\u00f4ng l\u01b0u reasoning block l\u00e2u h\u01a1n c\u1ea7n thi\u1ebft v\u00e0 lu\u00f4n coi transcript API l\u00e0 t\u00e0i li\u1ec7u m\u1eadt.<\/p>\n

VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb The Hacker News v\u00e0 nghi\u00ean c\u1ee9u Stealing Reasoning Traces from Proprietary LLM APIs<\/em><\/p>","protected":false},"excerpt":{"rendered":"

M\u1ed9t nghi\u00ean c\u1ee9u m\u1edbi v\u1ec1 b\u1ea3o m\u1eadt API m\u00f4 h\u00ecnh ng\u00f4n ng\u1eef l\u1edbn cho th\u1ea5y c\u00e1c kh\u1ed1i reasoning \u1ea9n, v\u1ed1n \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 duy tr\u00ec tr\u1ea1ng th\u00e1i suy lu\u1eadn gi\u1eefa nhi\u1ec1u l\u01b0\u1ee3t g\u1ecdi API, c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh \u0111i\u1ec3m r\u00f2 r\u1ec9 d\u1eef li\u1ec7u n\u1ebfu b\u1ecb ghi l\u1ea1i v\u00e0 chia s\u1ebb nguy\u00ean tr\u1ea1ng trong log […]<\/p>\n","protected":false},"author":2,"featured_media":1937,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[639,77,644,645,643,640,642,42,641,114],"class_list":["post-1939","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kien-thuc","tag-ai-security","tag-anthropic","tag-api-security","tag-data-leakage","tag-google-gemini","tag-llm-api","tag-openai","tag-prompt-injection","tag-reasoning-models","tag-vncybers"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1939","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1939"}],"version-history":[{"count":2,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1939\/revisions"}],"predecessor-version":[{"id":1941,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1939\/revisions\/1941"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1937"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1939"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1939"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1939"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}