Wiz Uncovers Critical Access Bypass Flaw in AI-Powered Vibe Coding Platform Base44
A well-known vibe coding platform called Base44 has a significant security hole that has been patched, according to cybersecurity specialists. This flaw could allow unwanted access to user-built private programs.
In a report shared with The Hacker News, cloud security company Wiz stated that "the vulnerability we discovered was remarkably simple to exploit -- an attacker could have created a verified account for private applications on their platform by providing only a non-secret 'app_id' value to undocumented registration and email verification endpoints.
As a result of this problem, all authentication controls—including Single Sign-On (SSO) safeguards—are circumvented, allowing complete access to all private apps and the data they contain.
Wix, the company that owns Base44, re...