# Researchers find exposed identity records and messages in Lovable apps

_Published Saturday, November 14, 2026 at 2:18 PM EST · Security · Latest · Tier 2 — Notable_

![Researchers find exposed identity records and messages in Lovable apps — Primary](https://www.crissyfield.de/images/research-lovable-opengraph.jpg)

Researchers at crissyfield.de reported updated findings of sensitive data accessible without login in applications built with Lovable. Their examination of 159,041 projects found exposures including more than 200,000 chat messages at a German lifestyle forum and more than 1,000 records containing identity document details at a service provider.

The investigation focused on Supabase databases, retrieving records through initial page loads and additional read-only requests. Recurring database integration patterns could make similar access mistakes easier to exploit across applications. The researchers could not establish whether exposed data had been misused, and their Common Crawl sample was not representative of all Lovable applications.

## Sources

- [crissyfield.de](https://www.crissyfield.de/research/lovable-en/)

---
Canonical: https://techandbusiness.org/newswire/BiyUuz9wJrfZ4Wylt-3Dki
Published: 2026-11-14T19:18:23.215Z
Story chronology: 2026-11-14T17:43:10.000Z
Retrieved: 2026-11-15T00:01:49.344Z
Publisher: Tech & Business (techandbusiness.org)