{"schema_version":"0.10.0","id":"LR-2026-0500","record_version":1,"title":"Lovable flaw exposed private project data, source code and credentials","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":62.0,"score_breakdown":{"source_authority":12.1,"independent_corroboration":20.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":4.8,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"confirmed","reason":"2 independent outlets","original_document":null,"reports_total":3,"reports_independent":2,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"confirmed","reason":"2 independent outlets"}]},"sources_hash":"492451684b87c1351826fc65710078c0f3e85cd3870630bd85d6e38ee15fc52b"},"system":{"model_name":null,"model_version":null,"developer":"Lovable","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":"Generates application code and provisions and deploys backends from natural-language descriptions","safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-04-20","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"public_researcher","summary":"Lovable, an AI app builder that generates code, provisions a backend and deploys applications for users, had an authorization flaw in its API. According to a security researcher, a free account could read the source code, database credentials, AI chat histories and live customer data of projects created before November 2025. The researcher showed real personal information from a Danish nonprofit's admin panel. Lovable was notified through its HackerOne programme on March 3, 2026, and added ownership checks only for projects created after the cutoff. The researcher disclosed the flaw publicly on 2026-04-20. Lovable said it did not suffer a data breach and described the exposure as a visibility-setting misunderstanding.","tags":[],"date_detected":null,"near_miss":null,"root_cause":"infrastructure","root_cause_detail":"Missing ownership checks on API endpoints, including /projects/{id}, let users query project data that was not theirs","failure_class_detail":null,"responsible_party":"provider","adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null,"primary_risk":"RK04"},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"major","severity_because":"Test: unbounded scope stated. Fact: any free account holder can read every project created before the November 2025 cutoff.","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://glitchwire.com/news/lovable-dev-fixed-a-critical-bug-for-new-projects-and-left-every-old-one-exposed/","publisher":"Glitchwire","date":"2026-04-20","type":"press","title":"Lovable.dev Fixed a Critical Bug for New Projects and Left Every Old One Exposed - Glitchwire","archived_url":null,"attachment":"first_report"},{"url":"https://www.theregister.com/security/2026/04/21/lovable-denies-data-leak-cites-intentional-behavior/5226233","publisher":"The Register","date":"2026-04-20","type":"press","title":"Vibe coding upstart Lovable denies data leak, cites 'intentional behavior,' then throws HackerOne under the bus - The Register","archived_url":null,"independence":"independent"},{"url":"https://startupfortune.com/lovables-api-flaw-exposed-private-project-data-from-the-66-billion-ai-app-builder-used-by-nvidia-and-microsoft-teams/","publisher":"Startup Fortune","date":"2026-04-20","type":"press","title":"Lovable's API flaw exposed private project data from the $6.6 billion AI app builder used by Nvidia and Microsoft teams - Startup Fortune","archived_url":null,"independence":"independent"}],"per_field_confidence":{"system.developer":"C","system.intended_use":"C","event.incident_class":"C","event.detection_method":"C","event.root_cause":"C","event.root_cause_detail":"C","event.responsible_party":"C","context.industry":"C","context.country":"C","impact.severity":"D","impact.severity_because":"D","event.primary_risk":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"system.developer":[{"source_index":2,"quote":"Lovable, the Swedish AI app builder valued at $6.6 billion and deployed by teams at Nvidia, Microsoft, and a growing list of enterprise clients, has confirmed a security flaw that exposed sensitive user data across older projects."}],"system.intended_use":[{"source_index":0,"quote":"Users describe an application in natural language, and the platform generates code, provisions a backend (typically Supabase), and deploys the result."}],"event.incident_class":[{"source_index":0,"quote":"Independent security researcher @weezerOSINT publicly disclosed a critical Insecure Direct Object Reference vulnerability in Lovable.dev today."}],"event.detection_method":[{"source_index":0,"quote":"Independent security researcher @weezerOSINT publicly disclosed a critical Insecure Direct Object Reference vulnerability in Lovable.dev today."}],"event.root_cause":[{"source_index":2,"quote":"The vulnerability, first reported through HackerOne in March 2026, stemmed from missing ownership checks on API endpoints including /projects/{id}, meaning any logged-in user could query project data that wasn't theirs to see."}],"event.root_cause_detail":[{"source_index":2,"quote":"The vulnerability, first reported through HackerOne in March 2026, stemmed from missing ownership checks on API endpoints including /projects/{id}, meaning any logged-in user could query project data that wasn't theirs to see."}],"event.responsible_party":[{"source_index":0,"quote":"Today's flaw is a platform-level authorization gap that affects Lovable itself."}],"context.industry":[{"source_index":0,"quote":"Lovable is one of the higher-profile entrants in the AI app-building category."}],"context.country":[{"source_index":2,"quote":"Lovable, the Swedish AI app builder valued at $6.6 billion and deployed by teams at Nvidia, Microsoft, and a growing list of enterprise clients, has confirmed a security flaw that exposed sensitive user data across older projects."}],"impact.severity":[{"source_index":0,"quote":"The flaw lets any free Lovable account holder read the full source code, database credentials, AI conversation histories, and live customer data of every project created before an apparent November 2025 cutoff."}],"impact.severity_because":[{"source_index":0,"quote":"The flaw lets any free Lovable account holder read the full source code, database credentials, AI conversation histories, and live customer data of every project created before an apparent November 2025 cutoff."}],"event.summary":[{"source_index":0,"quote":"Independent security researcher @weezerOSINT publicly disclosed a critical Insecure Direct Object Reference vulnerability in Lovable.dev today."},{"source_index":0,"quote":"The flaw lets any free Lovable account holder read the full source code, database credentials, AI conversation histories, and live customer data of every project created before an apparent November 2025 cutoff."},{"source_index":0,"quote":"Querying the exposed database returned genuine personal information, including names, companies, job titles, LinkedIn profiles, and contact details for speakers from Accenture Denmark and Copenhagen Business School."},{"source_index":0,"quote":"Lovable was notified through its HackerOne Vulnerability Disclosure Program on March 3, 2026, 48 days before today's public release."},{"source_index":0,"quote":"Legacy projects received no such treatment."},{"source_index":0,"quote":"To be clear: We did not suffer a data breach."}]},"notes_on_gaps":"No date of occurrence, record count, affected-party count, loss amount or model details are stated. No AI agent acting autonomously is described, so agent_involved is set false and no failure_class is given. No trigger is stated. Sources conflict: Glitchwire says no authentication was needed, while Startup Fortune says any authenticated user could access the data. Lovable disputes the breach characterization. Severity major rests on the unbounded-scope test as judged by me. Mapping the ownership-check remediation to A1 is a judgement. The country SE reflects the company's stated origin, not a stated incident location. The Register source contained no incident content. Detection date is not stated; March 3 is the HackerOne notification date. Control outcomes for J1 and A1 are my judgement from the sources. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Confirmed (2 independent outlets)]"},"context":{"industry":"AI app-building software development platform","org_size_band":null,"country":"SE","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"The platform generated application code and provisioned backends from natural-language descriptions.","quote":"Users describe an application in natural language, and the platform generates code, provisions a backend (typically Supabase), and deploys the result.","source_index":0,"grade":"C"},{"step":"went_wrong","text":"A missing ownership check let any free account read other users' projects created before November 2025.","quote":"The flaw lets any free Lovable account holder read the full source code, database credentials, AI conversation histories, and live customer data of every project created before an apparent November 2025 cutoff.","source_index":0,"grade":"C"},{"step":"caught","text":"An independent security researcher found and publicly disclosed the flaw.","quote":"Independent security researcher @weezerOSINT publicly disclosed a critical Insecure Direct Object Reference vulnerability in Lovable.dev today.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://glitchwire.com/news/lovable-dev-fixed-a-critical-bug-for-new-projects-and-left-every-old-one-exposed/","https://www.theregister.com/security/2026/04/21/lovable-denies-data-leak-cites-intentional-behavior/5226233","https://startupfortune.com/lovables-api-flaw-exposed-private-project-data-from-the-66-billion-ai-app-builder-used-by-nvidia-and-microsoft-teams/"]},"analysis":{"sections":{"timeline":[{"text":"The researcher publicly disclosed the flaw.","quote":"Independent security researcher @weezerOSINT publicly disclosed a critical Insecure Direct Object Reference vulnerability in Lovable.dev today.","source_index":0,"when":"2026-04-20"}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://glitchwire.com/news/lovable-dev-fixed-a-critical-bug-for-new-projects-and-left-every-old-one-exposed/","https://www.theregister.com/security/2026/04/21/lovable-denies-data-leak-cites-intentional-behavior/5226233","https://startupfortune.com/lovables-api-flaw-exposed-private-project-data-from-the-66-billion-ai-app-builder-used-by-nvidia-and-microsoft-teams/"]}}