TLDR InfoSec · STRATEGIES & TACTICS

WIZ RESEARCH UNCOVERS CRITICAL VULNERABILITY IN AI VIBE CODING PLATFORM BASE44 ALLOWING UNAUTHORIZED ACCESS TO PRIVATE APPLICATIONS

wiz.io8 min read

Summary from the TLDR InfoSec newsletter

Wiz Research discovered a critical vulnerability in Base44, a popular "vibe coding" platform that allows users to build apps through natural language prompts. The flaw allowed attackers to bypass authentication using only non-secret app IDs, potentially granting access to private enterprise applications and sensitive data.