Research · 2026-10-23
What we found in 24 public apps built with AI
We scanned 34 public GitHub repositories built with Lovable, Bolt and Claude Code and checked every finding by hand. Of the 24 that contained a real app, 16 (67%) had at least one confirmed high or critical problem. The most common serious issue was a Supabase Edge Function anyone could trigger (29% of apps), followed by database tables anyone could read (25%).
67%
of apps had a high or critical problem
29%
had an Edge Function anyone can trigger
25%
had a table anyone can read
How often each problem appeared
Share of the 24 apps with at least one confirmed case.
| Problem | Share of apps | Apps |
|---|---|---|
Uses an npm package with a known vulnerability Most are in build tools; we mark which ones your code actually imports. | 92%(22) | |
Edge Function anyone can trigger Sending email, calling an AI model or writing with admin rights, with no check of who is calling. How to fix | 29%(7) | |
Database table anyone can read Readable with the public anon key, including tables with personal data. How to fix | 25%(6) | |
Database function anyone can call SECURITY DEFINER functions without a caller check. | 21%(5) | |
Admin database function without a fixed search_path Lets a caller swap the tables the function sees. | 21%(5) | |
No security headers No Content-Security-Policy or frame protection in the hosting config. | 21%(5) | |
Database table anyone can change UPDATE or DELETE policies with USING (true), or RLS off. How to fix | 13%(3) | |
Secret keys committed to git Including a Stripe secret key and the Supabase service role key. How to fix | 8%(2) | |
Login codes or tokens from Math.random() Predictable 2FA codes and session tokens. | 8%(2) | |
Public storage bucket with private files Inspection photos and contractor documents. | 8%(2) | |
HTML built from user input (XSS) dangerouslySetInnerHTML or innerHTML with user content. | 8%(2) | |
AI calls without login or limits A direct path to a surprise AI bill. How to fix | 8%(2) |
Which tools the apps were built with
- Lovable: 15
- Bolt: 2
- Claude Code: 2
- Not identifiable: 5
19 of the 24 apps used Supabase.
Method and limits
- Repositories were found through GitHub search for Lovable, Bolt and Supabase projects. This is not a random sample; it leans towards projects whose owners made the code public.
- 10 of the 34 repositories were templates or contained no app code and are excluded from the percentages.
- We read the code only. We did not test or access any live app, and we never ran the code.
- Every finding was checked by hand against the code; findings we judged false alarms are not counted.
- We publish counts only. No repository, owner or app is named.