Back to Vulnerability Hub
CriticalAI-Generated Code Vulnerability
IDOR and Auth Bypass
Endpoints trust client IDs without server-side ownership checks, enabling account data access.
Affected Platforms
CursorBolt.newReplitv0
Severity
Critical
Remediate immediately
How to detect it
- 1Replay requests with modified object identifiers
- 2Test missing middleware coverage across routes
- 3Validate access controls on write endpoints
How to fix it
- 1Enforce object-level authorization checks
- 2Centralize auth middleware
- 3Add route-level regression tests
Check if your app is affected
VibeMeds automatically detects this and 41 other vulnerability patterns.