Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding platform Base44 Allowing Unauthorized Access to Private Applications

Published

2025-07-29 14:00

Collected

2026-08-29 01:14

---
id: 6996
title: "Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding platform Base44 Allowing Unauthorized Access to Private Applications"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/critical-vulnerability-base44"
published_at: "2025-07-29T14:00:00Z"
tags: ["ai-security", "cloud-security", "authentication-bypass", "vibe-coding", "wix", "wiz-research", "base44"]
phying_url: "https://phying.com/item/6996"
lang: en
---

# Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding platform Base44 Allowing Unauthorized Access to Private Applications

## Summary

Wiz Research finds a critical flaw in vibe-coding platform Base44: a non-secret app_id let attackers register verified accounts and access private apps, bypassing SSO; it was fixed within 24 hours.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2025-07-29T14:00:00Z
- **Original:** https://www.wiz.io/blog/critical-vulnerability-base44
- **Phying News:** https://phying.com/item/6996