TLDR Web Dev · MISCELLANEOUS
CRITICAL VULNERABILITY IN AI VIBE CODING PLATFORM BASE44
Summary from the TLDR Web Dev newsletter
Wiz Research discovered a vulnerability in the Base44 vibe coding platform that allowed unauthorized access to private applications by exploiting undocumented registration and email verification endpoints. This vulnerability bypassed authentication controls and was quickly reported to and fixed by Wix (Base44's parent company) within 24 hours.