LLM API leakage in iOS apps: what should security teams change?

TL;DR: 64% of 444 iOS apps with LLM features exposed exploitable credentials or backend access, and 72% were still exploitable 90 days after disclosure, according to Approov’s analysis of Wake Forest University research; in 146 cases attackers could send billable inference requests and often extract system prompts. The key issue is not iOS alone but the broader failure of putting trust decisions and secrets on an interceptable client channel.

Editorial analysis by NHI Mgmt Group, based on content published by Approov: “The Leak isn't the Key. It's the Channel: What the iOS LLM Credential Study Tells Every Mobile Team”.

By the numbers:

• The researchers analyzed 444 iOS apps with working LLM features.
• 282 of them, or 64%, exposed exploitable credentials or backend access in network traffic.

Key questions

Q: What fails when LLM credentials are placed on a mobile client?

A: The failure is not just leakage of a string.

Q: Why do client-side LLM protections still leave apps exposed?

A: Because client-side controls assume the endpoint will enforce them honestly.

Q: What are the signs that an app-to-LLM control is failing?

A: Common signs include persistent use of bearer tokens with long lifetimes, unauthenticated relays, keys visible in traffic, and failures that remain after secret rotation.

Practitioner guidance

• Externalise LLM credentials from client apps Keep provider keys out of the app package and out of client-controlled traffic.
• Require server-side proof of caller identity Make the backend verify that each request comes from a legitimate app instance running in an expected environment before it forwards any LLM request.
• Treat proxy auth as mandatory, not optional If a backend relay exists, protect it with authentication and reject open-relay behaviour.

Bottom line: The study shows that LLM app risk is driven by how secrets and trust are handled across the channel, not by iOS alone.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →