Lovable Apps Leak Passport Data and 200K Private Messages

1 reports archived1 independent sourcesupdated 11/15/2026, 01:43:10

Synthesis & Latest Updates

1 Sources Cross-Validated

Security researchers scanned 159,041 Lovable-generated projects and found many exposing passports, private messages and other sensitive data without any login. The incident highlights systemic gaps in default security posture and data-permission design across AI low-code platforms, with non-technical builders most at risk.

LATEST/Security researchers scanned 159,041 Lovable-generated projects and found many exposing passports, private messages and other sensitive data without any login. The incident highlights systemic gaps in default security posture and data-permission design across AI low-code platforms, with non-technical builders most at risk.

Hourly heat curve

2 fully observed hours

Fewer than 3 fully observed hours; trend not plotted yet.

Coverage timeline

Total 1 reports · Latest first

Hacker News AIT2Nov 15, 01:43·78 pts
Lovable Apps Leak Passport Data and 200K Private Messages
- The study covered 159,041 Lovable projects, many readable without authentication
- Exposed data includes passport details and over 200,000 private messages
- Root cause lies in platform defaults and permission models rather than isolated user errors
View Related Reports & Analysis Original Source