Gemini 2.5 Pro Preview 05 06 profile

    Gemini 2.5 Pro Preview 05 06 — security & risk dashboard

    Known weaknesses, safety and security advisories, and documented real-world incidents for Gemini 2.5 Pro Preview 05 06 — collected automatically and re-checked every few hours, so teams building on it can see what to design around.

    Last checked 23 Oct 2026

    Ask the Advisor about this model
    Known flaws

    4

    Security risks

    4

    Real-world incidents

    0

    Advisories logged

    0

    Security, safety & abuse risks

    • Google documented threat actors repurposing earlier Gemini services for phishing and reconnaissance; that reporting does not identify this preview.
    • Untrusted documents, retrieved pages, and tool responses can contain prompt-injection instructions.
    • Generated factual claims, citations, and code require independent validation before consequential use.
    • Tool-connected applications require external authorization and least-privilege controls to limit harmful actions.

    Known flaws & limitations

    • This dated preview was superseded and is not the stable Gemini 2.5 Pro release.
    • Native output is text rather than generated images or audio.
    • Historical paid API rates increased above 200,000 input tokens to $2.50 per million input tokens and $15 per million output tokens.
    • Historical output-token billing included thinking tokens, increasing costs for reasoning-intensive tasks.

    Security advisories & risk updates

    No risk advisories logged since this profile started being tracked. New ones appear here automatically.

    What this means if you are building on it

    • New production deployments requiring a currently supported model identifier.
    • Native image or audio generation.
    • Security-sensitive autonomous actions without external authorization controls.
    • Publication of factual or technical outputs without independent review.

    Everything here comes from published documentation, advisories and reporting, with links to the original sources. It is not a complete vulnerability database — always check the provider's own security notices before shipping.