Security researchers say misconfigured databases and public API keys left the AI agent social network open to anyone on the internet.