Gemini 2.5 Pro profile

    Gemini 2.5 Pro — security & risk dashboard

    Known weaknesses, safety and security advisories, and documented real-world incidents for Gemini 2.5 Pro — collected automatically and re-checked every few hours, so teams building on it can see what to design around.

    Last checked 18 Oct 2026

    Ask the Advisor about this model
    Known flaws

    5

    Security risks

    4

    Real-world incidents

    0

    Advisories logged

    0

    Security, safety & abuse risks

    • Untrusted documents and tool responses can carry prompt injections; application permissions must be enforced independently of model instructions.
    • Safety safeguards do not guarantee resistance to adversarial prompting or harmful-content requests.
    • Coding and reasoning capabilities can support malicious software development and other dual-use cyber activities.
    • Incorrect advice or inappropriate tool actions can cause harm when applications treat model outputs as authoritative.

    Known flaws & limitations

    • Can produce factual errors and unsupported conclusions; benchmark results do not establish reliability for individual answers.
    • Thinking cannot be completely disabled for Gemini 2.5 Pro, limiting control over reasoning overhead.
    • The standard model generates text, not native image, audio or video output.
    • Documented standard Gemini API prices are USD per million tokens: $1.25 input and $10 output for prompts up to 200,000 tokens; $2.50 input and $15 output above that threshold.
    • Output billing includes thinking tokens, so visible response length alone does not determine cost.

    Security advisories & risk updates

    No risk advisories logged since this profile started being tracked. New ones appear here automatically.

    What this means if you are building on it

    • Unsupervised high-stakes medical, legal or financial decisions.
    • Applications requiring native image, audio or video generation.
    • Strict low-latency workloads requiring reasoning to be completely disabled.
    • Agents with unrestricted access to production systems, credentials or sensitive data.

    Everything here comes from published documentation, advisories and reporting, with links to the original sources. It is not a complete vulnerability database — always check the provider's own security notices before shipping.