Observed incident

Moltbook database misconfiguration exposed agent tokens and private data

Reported

What happened

Researchers found Moltbook's database accessible without effective access controls. Wiz reported exposed agent authentication tokens, email addresses, private messages, and unauthorized write capability.

Parties and reporting

AI tools and systems: Moltbook, Supabase

Outcome

Wiz said the team secured all identified tables by February 1, after several rounds of fixes.

Operating lesson

Enforce database access policies before launch and test both read and write permissions with untrusted identities.

Evidence and limits

This was an observed production data exposure; the cited sources do not establish malicious theft of all accessible records. Wiz independently expanded an earlier discovery.

Sources