2024-06-25 · 2024-Q2
Rabbit R1 Hardcoded API Keys
Layer tags: not yet tagged.
Target
Rabbit R1 AI device
Impact
ElevenLabs admin key, Azure, Yelp, Google Maps, SendGrid keys exposed; could crash entire rabbit OS backend
Root Cause
API keys hardcoded in device source code instead of secure storage