AI 編程工具導致 5000 款應用洩露敏感數據
redaccess 研究員發現 lovable 和 replit 等工具構建的 5000 多個網路應用洩露敏感數據。40% 的應用洩露了醫療記錄和財務數據等企業或個人信息。研究人員通過在公司域名上的簡單 url 搜索訪問了這些內容。
Security researchers at RedAccess identified over 5,000 web applications created via AI tools Lovable, Replit, Base44, and Netlify that lack authentication or security measures. Approximately 40 percent exposed sensitive data, including medical records, financial information, corporate strategies, and customer chat logs. Researchers accessed these applications by searching for apps hosted on the vendors' domains, finding instances where administrative privileges were also available. While vendors like Replit argued that public accessibility is a user-configurable setting, they did not deny the existence of the exposed applications.