Moltbook Data Exposure and Emerging Risk of Viral AI Prompt Worms

Security researchers reported a major data exposure affecting Moltbook, an AI-agent-focused social network used by autonomous agents such as OpenClaw. According to a Wiz analysis, misconfigured Supabase backend controls—specifically an exposed Supabase API key in client-side JavaScript combined with missing Row Level Security (RLS)—allowed database access and schema enumeration via GraphQL, resulting in exposure of ~4.75 million records. The leaked data reportedly included ~1.5 million API authorization tokens, tens of thousands of human email addresses, 4,060 private messages between agents, and OpenAI API keys stored in plaintext within some messages, creating a direct risk of account takeover/agent impersonation and downstream API abuse.

Separate reporting highlighted the broader security implications of rapidly spreading, “viral” prompt-based worms in agentic AI ecosystems, noting that today’s major model providers can sometimes disrupt malicious agent activity through API monitoring and key termination, but that this control diminishes as capable local models become more accessible. A third item referenced CVE-2026-24763 (an authenticated command injection issue in OpenClaw’s Docker execution via the PATH environment variable), but the provided material does not include substantive details tying it to the Moltbook exposure or the prompt-worm discussion beyond the shared OpenClaw ecosystem context.