CVE-2025-48757

An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrary database tables of generated sites.

Assigner : cve@mitre.org

More information : https://docs.lovable.dev/changelog