What happened?

A security researcher's investigation alleges a serious data exposure in apps built with the Lovable platform. According to the finding, passport details and more than 200,000 private messages were accessible through these apps.

Why it matters

Lovable is one of the "vibe coding" tools that let people build apps with AI assistance without writing code. Such platforms allow non-technical users to ship apps quickly, but security configuration often falls by the wayside.

Scope of the exposure

  • Identity document data such as passports
  • More than 200,000 private messages
  • Multiple apps built with Lovable

What remains unclear

The source material provides only headline-level information; how many users are affected, Lovable's official response and whether the issue has been fixed are not yet verified. The figures and scope should therefore be read with caution.