
AI App-Maker Lovable Exposes Personal Details, Researchers Find Thousands of Cases
What Happened?
A security investigation revealed that Lovable apps exposed sensitive personal information, including passport details and payment information, without requiring user login. Researchers examined over 159,000 projects built using Lovable.
Key points
- Researchers at Crissy Field examined 159,041 projects built using Lovable.
- 34,545 projects used Supabase, exposing sensitive data without login.
- 24,664 websites sent database records publicly.
- 1,000 identity records with passport numbers were exposed.
- Exposed data included payment information and personal records.
- Lovable stated that the issue is widespread across the industry.
Key insights
- The investigation highlights the need for better security measures in AI app development.
- Users may be unaware of the risks associated with using AI platforms like Lovable.
- The findings could lead to increased scrutiny of AI-generated applications.
Why it matters
The findings raise concerns about the safety of AI-generated applications and the handling of personal data.
Source
India Today

