Linkedin Google API Key Vulnerability Exposes Gemini AI Access in Android Apps
Article Content
- •Google API keys for public services can now access Gemini AI without user consent.
- •32 active keys across 22 Android apps expose over 500 million installs to potential attacks.
- •Developers are advised to audit their cloud projects and restrict API access.
A vulnerability in Google's API key system has allowed unauthorized access to the Gemini AI platform from numerous Android applications. CloudSEK identified that existing API keys, meant for public services, inadvertently gained access to Gemini endpoints without user consent. This flaw affects 32 active keys across 22 widely used Android apps, which collectively have over 500 million installs. Attackers could exploit these keys to access sensitive user data, generate unexpected costs, and disrupt services. In one instance, a developer incurred $15,400 in charges due to a compromised key. The vulnerability stems from a structural flaw in Google's API design, merging public keys with server-side AI secrets. Researchers recommend developers audit their projects and restrict API access. Google has not yet responded to inquiries regarding this issue.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Chaos, Aisuru and Bitcoin Depot in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Malicious Arch Linux AUR Packages Exploit Typos to Gain Root Access A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated popular tools yay and paru. The attack involved typosquatted package names, such as 'yyay', which contained legitimate code combined with a malicious installation script that executed a remote shell script with root… 
Photon Health Data Breach Exposes Patient Information Photon Health, a Brooklyn-based healthcare technology company, disclosed a data breach on October 8, 2026, affecting patient data due to unauthorized access via a zero-day vulnerability in the Metabase application. The breach was discovered on August 21, 2026, after the Direwolf ransomware group claimed responsibility…