STUPID-2026-0034

Vibe-coded Moltbook exposed 1.5M API keys and 35,000 user emails via misconfigured database

9.0critical
January 15, 2026Source checked

Why 9/10

1.5M API keys and 35,000 emails were publicly reachable. Keys can be rotated; whether the data was copied by anyone other than the researchers is not established.

Scope
4/4
Many organisations or the public: a flaw in a widely used product, mass exposure, a large outage
Recoverability
2/3
Partly lost, or loss reported without saying whether it was recovered
Did it happen
2/2
Happened in real use
Beyond the user
1/1
Production systems, customers or third parties, or credentials and sensitive personal data

The score is the sum of these four factors. How each factor is scored · scored 2026-10-29

  1. Instruction given

    Build a social app with a Supabase backend.

  2. Expected behavior

    Protect the database with Row Level Security so records are not readable by the public internet.

  3. Actual behavior

    Moltbook, a vibe-coded application, shipped with a misconfigured Supabase database missing Row Level Security, exposing roughly 1.5 million API keys and 35,000 user email addresses directly to the public internet.

  4. Damage

    1.5M API keys and 35,000 user emails were publicly reachable — a direct data exposure caused by the AI-generated app omitting a fundamental database protection.

Full write-up

Moltbook, an application built through AI 'vibe coding', exposed roughly 1.5 million API keys and 35,000 user email addresses directly to the public internet. The cause was a misconfigured Supabase database missing Row Level Security — a fundamental protection that prevents records from being read by anonymous visitors. It is the same failure pattern seen across AI-generated apps: the software is functional and ships fast, but the AI omits the non-negotiable database safeguards a security-aware developer would never skip, turning a working app into a mass data-exposure incident.

Classification

Agent
Unknown agent
Failure mode
Security Vulnerability
Root cause
Instruction Misunderstanding
Domain
Backend
MIT AI Risk Repository (our mapping)
2.2 AI system security vulnerabilities and attacks · 2.1 Compromise of privacy by leaking or correctly inferring sensitive information taxonomy
Source
News Report

Related incidents

8.0
Scan of 5,600 vibe-coded apps found 2,000+ high-impact vulns, 400+ exposed secrets, PII leaks
10.0
Vibe-coded Tea app leaked 72,000 IDs and selfies plus 1.1M private messages from an unsecured bucket
9.0
EchoLeak: a zero-click email silently exfiltrated data from Microsoft 365 Copilot (CVE-2025-32711, CVSS 9.3)
9.0
Lovable-generated apps shipped without adequate Supabase row-level security, leaving databases readable and writable by anyone (CVE-2025-48757)
Discuss on Hacker News
Cite this record
StupidLLM. "STUPID-2026-0034: Vibe-coded Moltbook exposed 1.5M API keys and 35,000 user emails via misconfigured database." AI Agent Incident Database, 2026. https://www.stupidllm.com/incident/STUPID-2026-0034/ (accessed 2026-10-29). CC BY 4.0.

← STUPID-2026-0033By IDSTUPID-2026-0035 →

Get told when an agent breaks something

We document AI agent failures daily, severity-scored against a published scale. Each Monday, if any scored 7 or above that week — deleted data, leaked secrets, broken production — you get one email with the sources. When nothing did, you get nothing.

This database is callable over MCP — query it from inside your agent.