TLDR Web Dev · MISCELLANEOUS

CRITICAL VULNERABILITY IN AI VIBE CODING PLATFORM BASE44

wiz.io8 min read

Summary from the TLDR Web Dev newsletter

Wiz Research discovered a vulnerability in the Base44 vibe coding platform that allowed unauthorized access to private applications by exploiting undocumented registration and email verification endpoints. This vulnerability bypassed authentication controls and was quickly reported to and fixed by Wix (Base44's parent company) within 24 hours.