Base44 auth flaw let attackers hijack sessions
Jul 2025
Wiz researchers found Base44 auth logic bugs that allowed account takeover across sites using the SDK.
Incident Details
Perpetrator:Developer
Severity:Facepalm
Blast Radius:Potential ATO across many sites until patches rolled out.