Exposed Google Cloud API keys in public JavaScript may now authenticate Gemini API calls, risking data exposure and runaway usage charges.
Security researchers have found nearly 3000 publicly visible Google API keys authorizing Gemini. This allows abusive access.
Over 2,800 exposed Google API keys may allow unauthorized Gemini AI access, risking data leaks and massive API charges.