Vibe Coded Apps Are Spilling Users’ Personal Information Directly Into the Maw of Greedy Hackers

A security review found many AI-generated “vibe-coded” apps are being deployed with little or no authentication or security controls.

RedAccess said about 5,000 apps showed weak or absent protections, and roughly 40% exposed sensitive data including medical, financial, and corporate records.

The exposed information also included private chatbot logs, highlighting how easily personal and business data can leak.

Platforms including Lovable, Replit, Base44, and Netlify pushed back or shifted responsibility to app builders.

The findings underscore the privacy and cybersecurity risks of rapid AI-assisted software development without expert review.