Toxic Combinations: When Cross-App Permissions Stack into Risk

On January 31, 2026, researchers found Moltbook, an AI agent social network, had left its database exposed, leaking 35,000 email addresses and 1.5 million agent API tokens. Private messages also contained plaintext third-party credentials, including OpenAI API keys shared between agents.