Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding platform Base44 Allowing Unauthorized Access to Private Applications

Wiz Research disclosed a critical authentication vulnerability in Base44 (now part of Wix) where unauthenticated registration and OTP verification APIs accepted publicly visible app_id values, allowing attackers to create verified accounts for private applications and bypass SSO, potentially exposing sensitive enterprise data; the issue was responsibly disclosed, fixed within 24 hours, and no evidence of exploitation was found.