// SupabaseHIGH
UpGuard discovered approximately 16,000 Supabase-hosted databases publicly exposing sensitive personal data. The exposure stems from misconfigured Row Level Security (RLS) settings and improper access controls, allowing unauthorized public access to live database tables. Many databases were created by AI coding tools that skip RLS by default, leaving customer data accessible without authentication.
- Some Supabase customers are publicly exposing reams of people’s (opens in a new tab)
- UpGuard Found 16,326 Wide-Open Supabase Databases. The Fix Is Tw(opens in a new tab)
- Weekly Security Intelligence Briefing -- Week of 2026-09-28(opens in a new tab)
// Get alerts for Supabase