{"id":4431,"date":"2026-02-08T11:39:01","date_gmt":"2026-02-08T11:39:01","guid":{"rendered":"http:\/\/ft365.org\/index.php\/2026\/02\/08\/vibe-coded-moltbook-exposes-user-data-api-keys-and-more\/"},"modified":"2026-02-08T11:39:01","modified_gmt":"2026-02-08T11:39:01","slug":"vibe-coded-moltbook-exposes-user-data-api-keys-and-more","status":"publish","type":"post","link":"http:\/\/ft365.org\/index.php\/2026\/02\/08\/vibe-coded-moltbook-exposes-user-data-api-keys-and-more\/","title":{"rendered":"Vibe-Coded Moltbook Exposes User Data, API Keys and More"},"content":{"rendered":"<div>\n<p><img decoding=\"async\" src=\"http:\/\/ft365.org\/wp-content\/uploads\/2025\/06\/localimages\/ea721ff9-8ba4-4d88-b386-57e9e1606077.jpg?width=64&#038;height=64&#038;mode=crop&#038;scale=both&#038;format=webp\" alt=\"Photo of Phil Muncaster\" loading=\"lazy\"><\/p>\n<\/div>\n<div id=\"cphContent_pnlArticleBody\" data-layout-id=\"2\" data-edit-folder-name=\"text\" data-index=\"0\">\n<p>A self-styled social networking platform built for AI agents contained a misconfigured database which allowed full read and write access to all data, security researchers have revealed.<\/p>\n<p>Moltbook was vibe coded by its creator, Matt Schlicht, as a place for AI \u201cto hang out.\u201d It has garnered tremendous attention from the tech community for ostensibly offering a Reddit-like experience for AI agents to post content and \u201ctalk\u201d to each other.<\/p>\n<p>However, a simple non-intrusive security review by Wiz Security revealed a Supabase API key exposed in client-side JavaScript. This single point of failure granted unauthenticated access to the entire production database, the firm claimed in a blog post.<\/p>\n<p>\u201cSupabase is a popular open source Firebase alternative providing hosted PostgreSQL databases with REST APIs. It&#8217;s become especially popular with vibe-coded applications due to its ease of setup,\u201d explained Wiz head of threat exposure, Gal Nagli.<\/p>\n<p>\u201cWhen properly configured with Row Level Security (RLS), the public API key is safe to expose \u2013 it acts like a project identifier. However, without RLS policies, this key grants full database access to anyone who has it. In Moltbook\u2019s implementation, this critical line of defense was missing.\u201d<\/p>\n<p><em>Read more on vibe coding risks: Popular LLMs Found to Produce Vulnerable Code by Default<\/em><\/p>\n<p>The exposure meant the researchers were able to access 1.5 million API authentication tokens, 30,000 email addresses\u00a0and a few thousands private messages between agents.<\/p>\n<p>The API key exposure was particularly egregious, Wiz said.<\/p>\n<p>\u201cWith these credentials, an attacker could fully impersonate any agent on the platform \u2013 posting content, sending messages, and interacting as that agent,\u201d Nagli continued. \u201cThis included high-karma accounts and well-known persona agents. Effectively, every account on Moltbook could be hijacked with a single API call.\u201d<\/p>\n<p>Unauthenticated users could edit existing posts, inject malicious content or prompt injection payloads, and even deface the site, he warned.<\/p>\n<h2><strong>Vibe Coding Requires Human Review\u00a0<\/strong><\/h2>\n<p>The security snafu has now been fixed, but not before Wiz was able to discover that, as well as the 1.5 million agents listed on the platform, there were 17,000 human \u201cowners\u201d registered.<\/p>\n<p>\u201cAnyone could register millions of agents with a simple loop and no rate limiting, and humans could post content disguised as \u2018AI agents\u2019 via a basic POST request,\u201d Nagli noted. \u201cThe platform had no mechanism to verify whether an \u2018agent\u2019 was actually AI or just a human with a script. The revolutionary AI social network was largely humans operating fleets of bots.\u201d<\/p>\n<p>From a cybersecurity perspective, Wiz had the following takeaways:<\/p>\n<ul>\n<li>Vibe coding tools adds speed, but code needs careful reviewing by humans before deployment. Just one small misconfiguration led to the Moltbook exposure<\/li>\n<li>Data leaks are bad but write access introduces \u201cdeeper integrity risks\u201d by enabling content manipulation including prompt injection<\/li>\n<li>In the world of AI product development, security is an iterative process. Wiz had to work through multiple rounds of remediation with Moltbook\u2019s developer<\/li>\n<\/ul>\n<p>\u201cAs AI continues to lower the barrier to building software, more builders with bold ideas but limited security experience will ship applications that handle real users and real data,\u201d concluded Nagli.<\/p>\n<p>\u201cThat\u2019s a powerful shift. The challenge is that while the barrier to building has dropped dramatically, the barrier to building securely has not yet caught up.\u201d<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>A self-styled social networking platform built for AI agents contained a misconfigured database which allowed full read and write access to all data, security researchers have revealed. Moltbook was vibe coded by its creator, Matt Schlicht, as a place for AI \u201cto hang out.\u201d It has garnered tremendous attention from the tech community for ostensibly<\/p>\n","protected":false},"author":2,"featured_media":4432,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4431","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"featured_image_urls":{"full":["http:\/\/ft365.org\/wp-content\/uploads\/2026\/02\/4431-bbc2c6d4-1ee5-44cd-bb79-8ae3a4c71853.jpg",300,300,false],"thumbnail":["http:\/\/ft365.org\/wp-content\/uploads\/2026\/02\/4431-bbc2c6d4-1ee5-44cd-bb79-8ae3a4c71853-150x150.jpg",150,150,true],"medium":["http:\/\/ft365.org\/wp-content\/uploads\/2026\/02\/4431-bbc2c6d4-1ee5-44cd-bb79-8ae3a4c71853.jpg",300,300,false],"medium_large":["http:\/\/ft365.org\/wp-content\/uploads\/2026\/02\/4431-bbc2c6d4-1ee5-44cd-bb79-8ae3a4c71853.jpg",300,300,false],"large":["http:\/\/ft365.org\/wp-content\/uploads\/2026\/02\/4431-bbc2c6d4-1ee5-44cd-bb79-8ae3a4c71853.jpg",300,300,false],"1536x1536":["http:\/\/ft365.org\/wp-content\/uploads\/2026\/02\/4431-bbc2c6d4-1ee5-44cd-bb79-8ae3a4c71853.jpg",300,300,false],"2048x2048":["http:\/\/ft365.org\/wp-content\/uploads\/2026\/02\/4431-bbc2c6d4-1ee5-44cd-bb79-8ae3a4c71853.jpg",300,300,false],"morenews-featured":["http:\/\/ft365.org\/wp-content\/uploads\/2026\/02\/4431-bbc2c6d4-1ee5-44cd-bb79-8ae3a4c71853.jpg",300,300,false],"morenews-large":["http:\/\/ft365.org\/wp-content\/uploads\/2026\/02\/4431-bbc2c6d4-1ee5-44cd-bb79-8ae3a4c71853.jpg",300,300,false],"morenews-medium":["http:\/\/ft365.org\/wp-content\/uploads\/2026\/02\/4431-bbc2c6d4-1ee5-44cd-bb79-8ae3a4c71853.jpg",300,300,false],"crawlomatic_preview_image":["http:\/\/ft365.org\/wp-content\/uploads\/2026\/02\/4431-bbc2c6d4-1ee5-44cd-bb79-8ae3a4c71853-146x146.jpg",146,146,true]},"author_info":{"display_name":"henry","author_link":"http:\/\/ft365.org\/index.php\/author\/henry\/"},"category_info":"<a href=\"http:\/\/ft365.org\/index.php\/category\/uncategorized\/\" rel=\"category tag\">Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","_links":{"self":[{"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts\/4431","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/comments?post=4431"}],"version-history":[{"count":0,"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts\/4431\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/media\/4432"}],"wp:attachment":[{"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/media?parent=4431"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/categories?post=4431"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/tags?post=4431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}