Executive Summary
Researchers found 282 of 444 iOS AI chatbot apps exposed paid AI access through network traffic: plaintext API keys, reusable tokens or backends accepting requests without a key.
What Happened
Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic. In many cases, the path in was visible just by watching what the app sent: a plaintext API key, a reusable token, or a backend server that accepted requests with no key at all. Whoever grabs it can send model requests on the developer's account,
Affected Products
- iOS AI chatbot apps
Vulnerability / Attack Technique
Exposed AI API keys and open proxies in mobile apps
Technical Mechanism
Credentials or unprotected backends were visible in the apps' network traffic, letting others use the developers' AI accounts.
AI Security Category
LLM10:2025 Unbounded Consumption
Relevant Frameworks
RealGround Analysis
Shipping an AI key in a mobile app hands it to anyone. RealGround analysis: route AI calls through your own authenticated backend with per-user limits.
Recommended Controls
- Never embed AI provider keys in client apps
- Proxy AI requests through an authenticated backend
- Set spend limits on AI provider accounts
Related RealGround Service
AI Security Readiness Assessment · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/06/282-ios-apps-found-leaking-llm-api-keys.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.