UK Gov Code Leaks: 100+ Vulnerabilities Found

A recent security audit revealed over 100 significant vulnerabilities within publicly accessible UK government codebases. These flaws, stemming from a decade of open code publication for transparency and cost-efficiency, have been exacerbated by funding cuts leading to neglected technology maintenance. While sophisticated AI tools aided the discovery, many issues were basic and preventable.

The Planning Inspectorate experienced a critical incident where login credentials were inadvertently committed to a public repository, granting extensive access to sensitive data, including HR records and legal documents. The agency addressed this vulnerability within 20 minutes, confirming no data breach occurred and strengthening its systems.

Further scans across 33 organizations identified vulnerabilities in code used by the Department of Education and a Scottish Government portal. These findings highlight systemic issues with internal processes rather than inherent open-source risks. Recent concerns about AI accelerating vulnerability discovery have prompted some government bodies, like the NHS, to reconsider their use of open-source code.