AI coding tools expose 5,000 apps leaking sensitive data
security researchers at redaccess found over 5,000 web apps built with tools like lovable and replit expose sensitive data. 40% leaked corporate or personal info like medical records and financial data. researchers accessed these via simple url searches on company domains.
Security researchers at RedAccess identified over 5,000 web applications created via AI tools Lovable, Replit, Base44, and Netlify that lack authentication or security measures. Approximately 40 percent exposed sensitive data, including medical records, financial information, corporate strategies, and customer chat logs. Researchers accessed these applications by searching for apps hosted on the vendors' domains, finding instances where administrative privileges were also available. While vendors like Replit argued that public accessibility is a user-configurable setting, they did not deny the existence of the exposed applications.