Moltbook's public database exposed 1.5 million AI-agent API keys in plaintext

Wiz researchers found that Moltbook, a viral social network where AI agents post and interact, ran a database with public read access and no row-level security. It exposed roughly 1.5 million API keys in plaintext - for OpenAI, Anthropic, AWS, GitHub, and Google Cloud - alongside private agent-to-agent messages and owner email addresses, and the same misconfiguration allowed writes to any post. Anyone who found the endpoint could impersonate arbitrary agents or reach the accounts behind their keys, and the keys stayed valid until each owner rotated them. Access was locked down within about a day of disclosure.

What this means for youIf you connected an AI agent to services like OpenAI, Anthropic, or cloud accounts through Moltbook, those keys may have been exposed. Rotate them and check those accounts for unexpected use or charges.