Lovable VDP Program Statistics

View program

7 total issues disclosed

$0 total paid publicly

Most disclosed (3 disclosures) — Improper Authorization

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
Business Logic Bypass Allows Setting “Read Access” Role Without Pro Plan Subscription Business Logic Errors ziadmomen Medium 2026-03-16
Bypass of Open Redirect Fix on lovable.dev via /..// Path Traversal in redirect parameter Open Redirect marioniangi Medium 2026-03-12
Users can change project visibility which requires high subscription by just changing request body Improper Access Control - Generic hossam25 Medium 2026-03-09
Open Redirect on lovable.dev via redirect parameter leads to phishing attacks None supplied jdc94 No rating 2026-03-05
Low-privileged user can enable or disable Lovable AI for new projects in workspace Improper Authorization anxioussick Low 2025-11-07
Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable AI) Improper Authorization longlivedoma Low 2025-11-04
Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable Cloud) Improper Authorization longlivedoma Low 2025-11-04