A social network designed for artificial intelligence has exposed thousands of human users' credentials due to a security flaw, highlighting the limitations of relying on machine learning. Moltbook, marketed as an AI social network, has been compromised after Wiz, a cybersecurity firm, discovered a "vibe-coded" vulnerability in its platform.
According to Wiz's analysis, the issue arose from a Reddit-style forum setup that was allegedly created without human intervention by an AI assistant, as claimed by Moltbook's founder. However, the results were anything but intuitive. The platform exposed sensitive information, including 1.5 million API authentication tokens and private messages between agents.
The vulnerability also allowed unauthenticated users to edit live posts, raising concerns about authorship verification on the platform. Wiz found that the social network's "revolutionary AI" concept was in reality a front for humans operating fleets of bots.
This incident serves as a reminder that while AI can excel at tasks, it is not infallible and requires human oversight to avoid security breaches. The case highlights the need for vigilance when relying on machine learning, even in what appears to be a well-intentioned platform like Moltbook.
According to Wiz's analysis, the issue arose from a Reddit-style forum setup that was allegedly created without human intervention by an AI assistant, as claimed by Moltbook's founder. However, the results were anything but intuitive. The platform exposed sensitive information, including 1.5 million API authentication tokens and private messages between agents.
The vulnerability also allowed unauthenticated users to edit live posts, raising concerns about authorship verification on the platform. Wiz found that the social network's "revolutionary AI" concept was in reality a front for humans operating fleets of bots.
This incident serves as a reminder that while AI can excel at tasks, it is not infallible and requires human oversight to avoid security breaches. The case highlights the need for vigilance when relying on machine learning, even in what appears to be a well-intentioned platform like Moltbook.
like whats wrong with good ol facebook 
? but seriously tho this is kinda scary... thousands of ppl have their info exposed and its all bc of a flaw in the code 
what if its not just about security breaches but also about people losing control over their online presence 
i mean isnt that what social media is supposed to be about 
? anyway, kudos to wiz for catching this bug 
now ppl need to think twice before jumping on the AI bandwagon 
... I mean, I get it, AI is supposed to make our lives easier, but come on! If you're gonna use an AI social network, shouldn't you expect a certain level of security? 
Moltbook's 'vibe-coded' thingy just sounds like marketing mumbo-jumbo to me... a human created the setup with an AI assistant? Like, what's the point of that? 
It just goes to show that while AI can be super helpful, it's not a replacement for good old-fashioned human oversight. We need to stay vigilant and make sure these new tech platforms aren't playing games with our personal info 
gotta give it to Wiz tho for spotting this before it got any worse... shoulda been more careful, Moltbook 