CVE-2025-48757

CVE-2025-48757 concerns Lovable where an insufficient database Row-Level Security (RLS) policy up to 2025-04-15 could allow remote unauthenticated attackers to read or write to arbitrary database tables of generated sites. Several sources (NVD, Red Hat, CVE.org, CNNVD, PT-Security) confirm the is...