Rabbit R1 flaw leaves every past AI response exposed to the public
Reverse-engineering group Rabbitude just revealed that Rabbit left critical API keys hardcoded in its codebase, allegedly allowing anyone to access every response the R1 has ever given. The keys could also let attackers brick devices or alter responses. Rabbit stated it was alerted on June 25 and has found no evidence of compromised user data so far.