A flaw in Base44 let strangers into private apps built with it.

In July 2025 the security firm Wiz found that anyone who knew an app's ID could sign up to private apps made with the AI app builder Base44, including company tools with HR data and internal chatbots. Even single sign-on could be bypassed. Base44's owner Wix fixed it within 24 hours and found no sign of abuse.

Why this happens: When an AI platform builds and hosts your app, its security becomes yours. Check who can create an account and what a new account can see, and don't assume that 'private' means locked.