Some Supabase customers are publicly exposing reams of people’s data to the web
2026-09-25 · TechCrunch
Supabase customers using AI-generated and vibe-coded apps are accidentally exposing massive amounts of user data to the open web. Turns out letting AI write your backend without understanding security basics leads to exactly the disaster you'd expect. Who could have possibly predicted that vibes alone wouldn't handle database permissions?