A recent internet-wide census identified 36,769 self-hosted AI endpoints, including model servers, agent builders, and vector stores, with only 2% employing HTTP authentication, leaving the vast majority exposed without network-layer protections. Notably, 6,935 Ollama model servers responded to anonymous requests, and 5,223 agent builder endpoints—tools that store sensitive credentials—were widely reachable without authentication, posing significant security risks. The study highlights widespread misconfiguration rather than software vulnerabilities, recommending measures like binding services to localhost, deploying authentication gateways, and treating credential-storing agent builders as secure secrets stores to reduce exposure.
https://www.mysteriumvpn.com/blog/data-and-research/we-exposed-ai-supply-chain