A security researcher has identified over 100 significant vulnerabilities in publicly accessible UK government code, highlighting risks associated with inadequate cybersecurity measures. For nearly a decade, the UK government has embraced the practice of openly publishing its code to promote transparency and cost efficiency. This approach includes departments like the Department of Health and Social Care and the Home Office. However, budget constraints have led to negligence in maintaining and updating these systems. Chris Nesbitt-Smith, a security researcher at ControlPlane, discovered the vulnerabilities using consumer-grade AI models, emphasizing that many issues could have been detected through routine IT checks. One of the most severe vulnerabilities was found within the Planning Inspectorate, which inadvertently exposed a login on GitHub, granting extensive access to SharePoint sites, OneDrive accounts, and sensitive legal documents. The Planning Inspectorate quickly addressed the issue upon detection, ensuring no data breach occurred. Amanda Brock, CEO of OpenUK, clarified that the issue stemmed from poor internal practices, not open source security flaws. Nesbitt-Smith's scan of 349 public sector codebases across 33 organizations revealed vulnerabilities in about two-thirds of them, including critical services within the Department of Education. Some argue for halting the open publication of code due to AI's role in vulnerability discovery. However, Nesbitt-Smith warns that closing access without addressing the problems may worsen the situation, as adversaries could still exploit mirrored repositories.