Researchers have discovered a massive data leak in Lovable applications

Security researchers have discovered a vulnerability in the Lovable platform ecosystem that led to a large-scale leak of sensitive information. Without requiring authentication, personal user data and internal records of thousands of created applications were left publicly accessible.

During their investigation, the experts analyzed websites and found that security issues affected 30% of the total number of resources studied. In total, 24,664 applications created on this platform were at risk.

Critically important information was found to be publicly accessible, including personal records, passport numbers, and over 200,000 private chat messages. All this data was available to unauthorized parties, bypassing any authorization.

The identified vulnerability poses serious risks to users and owners of the compromised services, whose private correspondence and documents were exposed due to incorrect default access settings.