Supabase26 Sept 2026 · 9 min read
Why vibecoded apps keep shipping with wide-open Supabase tables
A UpGuard study published on September 25, 2026 found 16,326 Supabase databases with tables anyone can read, with no authentication and no exploit required. The cause fits in one sentence: the Table Editor protects by default, the API AI agents actually use doesn't.
