AI-built app on Lovable exposed 18K users, researcher claims

A vibe-coded app showcased on Lovable's Discover page shipped with 16 vulnerabilities, six of them critical, exposing 18,697 users' data, including 4,500+ students, because the AI-generated auth logic literally blocked the people it should allow and allowed the people it should block. When the researcher reported it, support closed his ticket without a word.