TLDR InfoSec · STRATEGIES & TACTICS
WIZ RESEARCH UNCOVERS CRITICAL VULNERABILITY IN AI VIBE CODING PLATFORM BASE44 ALLOWING UNAUTHORIZED ACCESS TO PRIVATE APPLICATIONS
Summary from the TLDR InfoSec newsletter
Wiz Research discovered a critical vulnerability in Base44, a popular "vibe coding" platform that allows users to build apps through natural language prompts. The flaw allowed attackers to bypass authentication using only non-secret app IDs, potentially granting access to private enterprise applications and sensitive data.