When Replit Employees Found a Critical Security Vulnerability in Lovable

Lovable, a Sweden-based AI-powered coding platform, reportedly contained critical security vulnerabilities.  Matt Palmer, who handles developer relations at Replit, a competing AI coding platform headquartered in the United States, and his colleague discovered the vulnerability in Lovable’s implementation of Row Level Security (RLS) policies in March. Palmer published his findings in a blog post on Thursday.  “Applications developed using its platform often lack secure RLS configurations, allowing unauthorised actors to access sensitive user data and inject malicious data,” said Palmer. RLS is a way to ensure that application users can only see and modify data they should have access to. Palmer found these vulnerabilities while examining an app called Linkable, whi