Fireworks AI: eval-job environment variables and API keys exposed via stolen internal credentials
Severity: high · Patch status: unknown · Since 2026-10-09
Fireworks AI says an unauthorized third party used internal Fireworks credentials to read environment variables attached to evaluation jobs in a limited number of customer accounts; API keys and tokens stored as secrets were likely captured. Fireworks found the activity on Oct 6, notified customers from Oct 7, rotated employee API keys on Oct 9 and revoked more user keys and service-account tokens on Oct 10. It reports no evidence that customer models, datasets, training data, inference traffic or personal information were accessed, but has not confirmed or ruled out misuse of the exposed third-party credentials. Affected customers must rotate every credential listed in their notice at the issuing provider (deleting the stored secret does not invalidate it). Wiz counts it among at least nine AI developer platforms hit in October 2026.
What to do
- If you received a Fireworks notice, rotate every third-party credential it lists at the issuing provider, then update apps and Fireworks secrets; deleting the stored secret does not invalidate it
- Create new Fireworks API keys to replace revoked ones and update applications
- Review logs of the listed third-party services for unauthorized reads, downloads or changes
- Look for unrecognized API keys, users, evaluators, training jobs and datasets and report them to security@fireworks.ai
- Audit what secrets your eval jobs and other hosted jobs receive; keep high-value keys out of them
Sources
All live incidents on Threat Watch
