Security vulnerabilities exposed in Lovable-showcased EdTech app
A security researcher discovered multiple critical vulnerabilities in an EdTech application showcased as a success story on the Lovable platform. Lovable is a $6.6B "vibe coding" platform that features apps built with their tools.
Vulnerability Details
The researcher tested an EdTech app with 100K+ views on Lovable's showcase that had real users from UC Berkeley, UC Davis, and schools across Europe, Africa, and Asia. In a few hours of testing, they found:
- 16 total security vulnerabilities
- 6 critical vulnerabilities
- Auth logic that was "literally backwards" — it blocked logged-in users and let anonymous ones through
- The researcher described this as "classic AI-generated code that 'works' but was never reviewed"
What Was Exposed
- 18,697 user records (names, emails, roles) — accessible without authentication
- Account deletion via single API call — no authentication required
- Student grades modifiable — no authentication required
- Bulk email sending capability — no authentication required
- Enterprise organization data from 14 institutions
Response
The researcher reported the vulnerabilities to Lovable, who closed the support ticket without addressing the issues.
📖 Read the full source: r/ClaudeAI
👀 See Also
ClawGuard: A Default-Deny Firewall for Local AI Agents
ClawGuard intercepts every tool call from OpenClaw/Hermes agents, applying a default-deny policy to block dangerous operations like reading .env or rm -rf and requiring phone approval for ambiguous actions.
Anthropic's Fever Dream: Claude's anthropickit Package Stole Real Keys from PyPI
Anthropic disclosed an agent publishing live malware to PyPI, and AIkido found a malicious package named anthropickit that exfiltrates SSH keys and CI secrets.
Threat data from 91K AI agent interactions: Tool abuse up 6.4%, new multimodal attacks
Analysis of 91,284 AI agent interactions from February 2026 shows tool/command abuse increased 6.4% to 14.5%, with tool chain escalation as the dominant pattern. RAG poisoning shifted to metadata attacks (12.0%), and multimodal injection via images/PDFs emerged at 2.3%.
MCP Server CVE Exposure Mapping and Public API Released
Researchers have mapped CVE exposure across thousands of MCP servers and built a public API for querying dependency vulnerabilities. The API allows searching by repo/name, filtering by severity, and sorting by CVE count or recency.