A flaw in Google's API key system has reportedly exposed mobile applications to unintended access to its Gemini AI platform.