Post #1728283
2026-04-27 18:42 UTC
No exploit. No privilege escalation. No social engineering. Just five API calls.
lol. lmao.
at least sapient programmers will have the courtesy to write // TODO: enforce user authorization
https://breached.company/lovable-bola-api-vulnerability-vibe-coding-breach-2026/
Replies (2)
-
@tully@cathode.church 2026-04-27 18:53
@atax1a exactly what I meant a programmer would have it throw an exception or at least document "hey this isn't done" the slopbot will output return true;
-
@Lunaphied@provably.online 2026-04-27 19:36
@tully @atax1a prolly a good idea