Xyzeva created a secondary scanning tool called Catalyst to check for read access to common Firebase databases.

Just how easy is it for anyone to gain access this personal data? According to the report, the vulnerable Firebase backends aren’t protected by firewalls or authentication systems.

Misconfigurations in Google Firebase databases allow unauthorized parties to find and access personal data of users.

Some 2,200 unsecured Firebase databases have caused more than 3,000 iOS and Android apps to leak user data, exposing over 100 million records including plaintext passwords, health information, GPS ...

Firebase Genkit is an open source framework that enables developers to quickly build AI into new and existing applications.