Vibe Coding Service Lovable Accused of Hosting Malware-Ridden Apps Exposing Thousands of Users — It Says They Should Take More Care

Why It Matters

The findings expose systemic risks of AI‑code platforms, prompting enterprises to reassess reliance on automated development without rigorous security vetting. This could drive tighter industry standards and affect adoption of low‑code solutions.

Key Takeaways

• One Lovable app had 16 vulnerabilities, six critical.
• 170 of 1,645 Lovable apps contain critical security flaws.
• AI‑generated code prioritized functionality over security, researchers warn.
• Data of 18,000+ teachers and students exposed publicly.
• Lovable now offers free security scans before app publication.

Pulse Analysis

The rapid rise of AI‑assisted low‑code platforms promises faster development cycles, yet security often lags behind functionality. Tools that generate code on demand can mask logical errors, especially when developers rely on default configurations without manual review. Industry analysts warn that the convenience of AI‑generated back‑ends may create a false sense of safety, encouraging organizations to embed such solutions without comprehensive testing.

Lovable’s recent controversy underscores these concerns. A single EdTech application built on the platform exposed more than 18,000 user records due to a logic flaw that allowed unauthenticated access to sensitive data. The researcher’s broader audit, covering 1,645 Lovable‑generated apps, identified critical vulnerabilities in roughly 10% of them, suggesting a systemic issue rather than an isolated bug. The exposure of teacher and student information has sparked debate among educators, investors, and cybersecurity firms about the adequacy of current safeguards in AI‑driven development environments.

Moving forward, firms deploying AI‑code services must integrate mandatory security scans, enforce code‑review policies, and adopt zero‑trust architectures. Regulators may soon impose stricter compliance requirements for platforms that automate code creation, especially in sectors handling personal data. By combining automated vulnerability assessments with human expertise, companies can reap the productivity benefits of AI while mitigating the heightened risk of data breaches. The Lovable episode serves as a cautionary tale, urging the tech community to prioritize security as a core component of AI‑enabled software development.