{
 "id": "AIR-2025-0425",
 "slug": "cve-2025-48757-row-level-security-flaw-in-lovable-platform",
 "title": "CVE-2025-48757: Row-Level Security flaw in Lovable platform",
 "summary": "An insufficient database row-level security policy in the Lovable platform allowed remote unauthenticated attackers to read or write to arbitrary database tables. The vendor disputed the claim, stating user responsibility for application data protection.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Lovable"
 ],
 "incident_date": "2025-05-30",
 "incident_date_precision": "day",
 "first_reported": "2025-05-30",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48757",
   "publisher": "NVD",
   "title": "CVE-2025-48757: An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read…",
   "published_at": "2025-05-30"
  }
 ],
 "source_count": 1,
 "confidence": 0.85,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2025-48757",
  "rls",
  "database-security"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}