Lovable Denies Data Leak Vulnerability, Disputes HackerOne Bug Report Handling

Summary

Lovable, an AI-powered "vibe coding" startup that enables users to build applications through natural language prompts, has denied a reported data leak vulnerability, characterizing the behavior as intentional. The company reportedly dismissed a security researcher's findings submitted through the HackerOne bug bounty platform, leading to public criticism of its vulnerability disclosure response process. The article, written by Jessica Lyons and published April 20, 2026, was subsequently updated