Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-02 · source-backed
The most concrete vibe coding security failure to date: a security researcher found 16 vulnerabilities (6 critical) in a Lovable-hosted exam platform featured on Lovable's own Discover page. The AI-generated authentication logic was literally backwards — it blocked logged-in users and granted access to anonymous visitors. Missing row-level security exposed 18,697 user records including 4,538 K-12 student accounts from UC Berkeley and UC Davis. Lovable's pre-publish security scan caught the issues, but the user deployed without fixing them. The Register
Each link below shares sources, entities, or timing with this story.
Lovable uses Supabase / Shared entity: Lovable / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Lovable uses Supabase); both cover Lovable; reported by the same outlet (theregister.com).
Lovable partners with Google Cloud / Shared entity: Lovable / What happened next
Linked by a graph relationship (Lovable partners with Google Cloud); both cover Lovable; picks up the Lovable thread on 2026-08-13.
Claude Code competes with Lovable / Shared topic / Tension
Linked by a graph relationship (Claude Code competes with Lovable); overlapping topics (account, coding); pushes against this story (but).
Claude Code competes with Lovable / Shared entity: Lovable / Shared topic / What happened next
Linked by a graph relationship (Claude Code competes with Lovable); both cover Lovable; overlapping topics (ai-generated, security).
Discover built by Google / Shared entity: Lovable / Shared topic / What happened next
Linked by a graph relationship (Discover built by Google); both cover Lovable; overlapping topics (authentication, coding).
Claude Code competes with Lovable / Same source domain
Linked by a graph relationship (Claude Code competes with Lovable); reported by the same outlet (theregister.com).
Shared entity: Lovable / Same source / Shared topic / Earlier coverage
Both cover Lovable; cite the same source (The Register); overlapping topics (access, blocked, security, user).
Claude Code competes with Lovable / Shared entity: Lovable / What happened next
Linked by a graph relationship (Claude Code competes with Lovable); both cover Lovable; picks up the Lovable thread on 2026-04-08.