A security flaw in Lovable's system allowed access to users' data and sparked online backlash over the startup's response.
Antigravity Strict Mode bypass disclosed Jan 7, 2026, patched Feb 28, enables arbitrary code execution via fd -X flag.