Moltbook Database Exposure Leaks User Communications and API Tokens
Moltbook
Researchers accessed an exposed Moltbook database, leaking thousands of private messages and API authentication tokens. The platform secured the database and deleted the accessed data shortly after disclosure.
- first report
- 31 Jan 2026
- last update
- 31 Jan 2026
Timeline · 1
Sources · 1
Research and catalogues
- 2026-01-31Moltbook Database Exposure Allegedly Revealed Users' Private Communications and API Authentication TokensAI Incident Database · incidentdatabase.ai/cite/1364
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- Attack on AI
- categories
- Data leak
- severity
- 3 · Confirmed exploitation
- targets
- Enterprise deployment
- owasp llm top 10
- LLM02:2025 Sensitive Information Disclosure
- mitre atlas
- no technique for these categories
- dates
- happened 31 Jan 2026 · first reported 31 Jan 2026
- origin
- AI Incident DatabaseDerived from the AI Incident Database (CC BY-SA 4.0).
- record
- confidence 0.85 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Moltbook Database Exposure Leaks User Communications and API Tokens https://gcdradar.vercel.app/incidents/moltbook-database-exposure-leaks-user-communications-and-api · AIR-2026-0418 · closed 2026-02-14 - Lane: Breaches & attacks - Severity: 3 (Confirmed exploitation) - Fix status: No fix needed - First reported: 2026-01-31 - AI role: Attack on AI - Products: Moltbook ## Summary Researchers accessed an exposed Moltbook database, leaking thousands of private messages and API authentication tokens. The platform secured the database and deleted the accessed data shortly after disclosure. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-01-31: Moltbook Database Exposure Allegedly Revealed Users' Private Communications and API Authentication Tokens (https://incidentdatabase.ai/cite/1364) ## Sources - 2026-01-31 AI Incident Database: Moltbook Database Exposure Allegedly Revealed Users' Private Communications and API Authentication Tokens https://incidentdatabase.ai/cite/1364 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedOpenClaw Exposed ClawdBot Control Interfaces Lead to Credential Access
Breaches & attacks · Exploited · since 25 Jan 2026
AI - closedCursor Data Exfiltration via MCP Server Prompt Injection Targeting Cursor
Research · since 24 Jun 2025
AI - closedLenovo AI Chatbot Lena Cross-Site Scripting via Prompt Manipulation in Lenovo AI Chatbot
Research · since 18 Aug 2025
AI - closed4.3AnythingLLM AnythingLLM Authentication Flaw Permits Unauthorized Workspace Access
Patch now · Disclosed · since 28 May 2026 · CVE-2026-47713
AI - closed8.2Dify CVE-2026-41949: Dify authorization bypass in file preview endpoint
Patch now · Disclosed · since 18 May 2026 · CVE-2026-41949
AI - closedMeta internal AI agent Meta Internal AI Agent Expose Sensitive Data via Advice
Patch now · Exploited · since 18 Mar 2026
AI