Berlin. Sensitive user data appears to have been publicly accessible on tens of thousands of websites built with Lovable, an AI platform that lets people create apps and websites through text prompts without programming experience. The findings come from IT security experts in an analysis reviewed exclusively by Handelsblatt.
Lovable says more than 50 million projects have already been created with its service, with a further 1.2 million added each week. Many users rely on applications built with the platform to run their businesses.
According to the investigation, attackers may have been able to access sensitive information from Lovable users through the security flaw for at least a year. Handelsblatt received information about the issue in mid-August, tested the findings and confronted Lovable about the problem.
Further research indicated that the vulnerability is not limited to Lovable alone. The company reportedly described the underlying issue as an industry-wide problem.
Sources: Handelsblatt.