>_ have you seen this? · September 26, 2026
Vibe-coded apps are leaking your customers' data on Supabase
Did your AI-built app just publish your users' data to the whole internet?
Researchers found multiple Supabase-backed apps, many built with AI coding tools, exposing large amounts of user data because row-level security and access controls were never configured. The apps worked fine and looked secure — the database was just wide open to anyone who checked.
What this means for your business
If you or a contractor used an AI agent to spin up a backend fast, go check your database permissions today — 'it works' is not the same as 'it's secure'.
Wondering how this applies to your workflow? That's a short conversation.
Book a consultation →