Collected research
SupaPwn: Hacking Our Way into Lovable's Office and Helping Secure Supabase
Investigates Supabase database privilege boundaries, showing how event-trigger callbacks and missing ownership checks interacted with temporary elevated roles. The complete chain applied to deprecated infrastructure, and the initial hypothesis about Lovable tenant isolation was disproved.
Record
- Researcher
- s1r1us, rootxharsh, zayne and LiveOverflow
- Published by
- Hacktron AI
- Date
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of s1r1us, rootxharsh, zayne and LiveOverflow, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .