gcdRadar
closedclosed 14 Feb 2026Breaches & attacks3 Confirmed exploitationAI

Moltbook Database Exposure Leaks User Communications and API Tokens

Moltbook

Researchers accessed an exposed Moltbook database, leaking thousands of private messages and API authentication tokens. The platform secured the database and deleted the accessed data shortly after disclosure.

first report
31 Jan 2026
last update
31 Jan 2026

Timeline · 1

  1. 31 Jan 2026Moltbook Database Exposure Allegedly Revealed Users' Private Communications and API Authentication Tokens

Sources · 1

Research and catalogues

  1. 2026-01-31

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
Attack on AI
categories
Data leak
severity
3 · Confirmed exploitation
targets
Enterprise deployment
mitre atlas
no technique for these categories
dates
happened 31 Jan 2026 · first reported 31 Jan 2026
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.85 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Moltbook Database Exposure Leaks User Communications and API Tokens

https://gcdradar.vercel.app/incidents/moltbook-database-exposure-leaks-user-communications-and-api · AIR-2026-0418 · closed 2026-02-14

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2026-01-31
- AI role: Attack on AI
- Products: Moltbook

## Summary

Researchers accessed an exposed Moltbook database, leaking thousands of private messages and API authentication tokens. The platform secured the database and deleted the accessed data shortly after disclosure.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-01-31: Moltbook Database Exposure Allegedly Revealed Users' Private Communications and API Authentication Tokens (https://incidentdatabase.ai/cite/1364)

## Sources

- 2026-01-31 AI Incident Database: Moltbook Database Exposure Allegedly Revealed Users' Private Communications and API Authentication Tokens https://incidentdatabase.ai/cite/1364

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    OpenClaw Exposed ClawdBot Control Interfaces Lead to Credential Access

    Breaches & attacks · Exploited · since 25 Jan 2026

    AI
  2. closed
    AI
  3. closed
    AI
  4. closed4.3
    AnythingLLM AnythingLLM Authentication Flaw Permits Unauthorized Workspace Access

    Patch now · Disclosed · since 28 May 2026 · CVE-2026-47713

    AI
  5. closed8.2
    Dify CVE-2026-41949: Dify authorization bypass in file preview endpoint

    Patch now · Disclosed · since 18 May 2026 · CVE-2026-41949

    AI
  6. closed
    AI