// SupabaseHIGH
Researchers identified over 16,000 Supabase databases with publicly readable tables and exposed PII through misconfiguration vulnerabilities. The issue stems from improper Row Level Security policies, overly permissive access controls, and incorrect API exposure rather than a platform vulnerability. More than half of affected databases showed schema indicators suggesting personally identifiable information exposure.
- 16,000+ Exposed Supabase Databases: Misconfiguration Risks - Che(opens in a new tab)
- Vibe Coding Security Report October 2026: LiteLLM, Railway, Next(opens in a new tab)
- Lovable Security Gap: Supabase RLS Left 7,403 Apps Open | The Cy(opens in a new tab)
// Get alerts for Supabase