---
title: "Discussion on \"Missing Role Checks: This Week in Vibe-Coding\" | Hashnode"
description: "Discussion on \"Missing Role Checks: This Week in Vibe-Coding\". A CVE in an AI-adjacent CRM shows what happens when role checks are skipped. Plus new platform guardrails from Lovable, Vercel, and Supabase."
url: "https://hashnode.com/posts/broken-access-control/6a5f7309e74d31cce7362f3d"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Missing Role Checks: This Week in Vibe-Coding](https://ismysitehackable.hashnode.dev/broken-access-control?utm_source=hashnode&utm_medium=feed)

A CVE in an AI-adjacent CRM shows what happens when role checks are skipped. Plus new platform guardrails from Lovable, Vercel, and Supabase.

Jul 21 · 6 min read · ismysitehackable.hashnode.dev  
Read the article

-   [#vibe-coding-security](https://hashnode.com/tag/vibe-coding-security)
-   [#ai](https://hashnode.com/tag/ai)
-   [#vibe-coding](https://hashnode.com/tag/vibe-coding)
-   [#ai-app-security](https://hashnode.com/tag/ai-app-security)
-   [#supabase](https://hashnode.com/tag/supabase)

## Written by

[VibeSec](https://hashnode.com/@vibesec)

@vibesec · New York, USA

  
[View profile](https://hashnode.com/@vibesec)

45% of AI-generated code ships with a vulnerability 🔓 We built the scanner that catches the ones most tools miss. Now we write about what's

45% of AI-generated code ships with a vulnerability 🔓 We built the scanner that catches the ones most tools miss. Now we write about what's actually broken in vibe-coded apps | Real findings, no false-positive bs

## Responses

Markdown supported · ⌘↵ to post

No responses yet.