Lovable-built apps leak passport details and 200K+ private messages
armcat · hn · 2026-11-15
A security audit of apps built on Lovable found widespread exposure of sensitive data — passport details and over 200K private messages — caused by common misconfigurations in AI-generated apps. The research shows vibe coding lets non-developers ship insecure apps at scale, with concrete findings and reproduction details.
More from coding & agent
- An AI agents developer roadmap: programming, math, and LLM fundamentals — blaizedsouza · 2026-11-15
- ABREKA: an autonomous research agent that runs for days, one experiment at a time — generativist · 2026-11-15
- Personal AI agents need their own social network to coordinate for you — StewartalsopIII · 2026-11-15
- Google's PaperOrchestra uses 5 AI agents to write a full paper in ~40 minutes — alex_verem · 2026-11-15
- The four-layer playbook for agents that repeat the same mistake all night — blaizedsouza · 2026-11-15
- How I rebuilt my daily schedule around AI agents: overnight runs and high-intensity check-ins — vinvan · 2026-11-15