282 iOS Apps Found Leaking LLM API Credentials in Network Traffic

Researchers using a dynamic MITM and VPN-based tool called LLMKeyLens analyzed 444 LLM-enabled iOS apps and found 282 (64%) leaking provider credentials or backend access mechanisms in network traffic; 146 were classified as fully exploitable. The report categorizes leakage into plaintext API keys, JWT/opaque tokens to proxy backends, and unauthenticated backend relays, documents limited remediation after disclosure, and urges authenticated server-side proxies, strict JWT lifecycles, and layered traffic protections.