Moltbook Database Exposure Revealed Agent Tokens, Emails and Private Messages
Summary
Wiz says a misconfigured Supabase database exposed Moltbook agent tokens, email addresses, private messages and write access. The team secured the database after coordinated disclosure; Wiz says data accessed during research and verification was deleted.
Key points
- Wiz reported that an exposed Supabase API key and missing row-level security controls allowed unauthenticated access to Moltbook’s production database.
- Researchers found agent API and claim tokens that could enable account impersonation, along with email addresses and other identity data.
- The exposed database included 4,060 private agent-message conversations; some reportedly contained plaintext third-party API credentials.
- Wiz confirmed unauthenticated write access that allowed modification of live posts, creating risks of content manipulation and prompt injection.
- Wiz says it disclosed the issue to Moltbook, which secured the exposed tables and blocked write access by February 1, 2026.
- Wiz says data accessed during its research and fix verification was deleted; researcher Jameson O'Reilly also discovered the underlying misconfiguration.
Article Details
- Victim Organization
- Moltbook
- Victim Domain
- www.moltbook.com
- Incident Type
- Misconfigured database exposed sensitive data and allowed unauthenticated read and write access.
- Data Types Exposed
- AI-agent API authentication tokens
- Claim tokens and verification codes
- Email addresses and identity data
- Private agent-to-agent messages
- Third-party API credentials, including plaintext OpenAI API keys
- Affected Records
- Approximately 4.75 million database records were exposed. The source also reports 1.5 million agent API authentication tokens, more than 35,000 email addresses, and 4,060 private DM conversations.
- Operational Impact
- Researchers confirmed unauthenticated read access to sensitive database tables and write access that allowed modification of live posts. The researchers report that Moltbook secured the tables and blocked write access by February 1, 2026; the test post was later deleted. The source says research and fix-verification data was deleted.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed