Case moltbook-db-exposureModel & data leakWorldwide
Moltbook AI-agent social network exposes 1.5M agent API tokens
Wiz found Moltbook's Supabase database lacked row-level security, letting anyone read and write 1.5M agent tokens, 35,000 emails and private messages containing third-party API keys.
HighAttack on AIStatus: PatchedVerified case file
Open in the interactive mapCite this case
- Reported
- Feb 2, 2026
- Location
- Worldwide
- Target
- Moltbook
- Severity
- High
- Triggered by
- Wiz Research and researcher Jameson O'Reilly (responsible disclosure)
- Actor type
- Security researchers
- Reported loss
- None reported
- CVE
- None
What happened
Wiz found Moltbook's Supabase database lacked row-level security, letting anyone read and write 1.5M agent tokens, 35,000 emails and private messages containing third-party API keys.
Impact: 1.5 million agent API tokens, about 35,000 owner emails and private agent messages containing third-party API keys readable and writable; any agent could be impersonated.
Who triggered it
Actor: Wiz Research and researcher Jameson O'Reilly (responsible disclosure)
Attribution: Self-disclosed by Wiz; Moltbook confirmed and fixed
Motive: Research; no malicious exploitation confirmed
How it happened
Attack vector: Supabase API key in client-side JavaScript combined with missing row-level security policies on production tables
Root cause: Vibe-coded platform shipped without row-level security, so the public anon key granted full read and write access
Timeline
- Researchers discover the exposed Supabase database
- Moltbook secures the database within hours with Wiz help
- Wiz publishes findings
Response
Moltbook enabled row-level security and rotated tokens; Wiz deleted data accessed during research.
Current status: Patched
Sources (open in a new tab)
- BankInfoSecurity bankinfosecurity.com
- Wiz wiz.io
- Infosecurity Magazine infosecurity-magazine.com
- TechRadar techradar.com
Cite this case
Moltbook AI-agent social network exposes 1.5M agent API tokens. AI Threat Watch, case moltbook-db-exposure, Feb 2, 2026. https://aithreat.io/cases/moltbook-db-exposure/
Permanent link: https://aithreat.io/cases/moltbook-db-exposure/