Vibe Coding Raises Security Concerns as More Than 5,000 Apps Risk Data Exposure

“Vibe Coding” allows users to direct AI in natural language to rapidly generate software, lowering barriers to development. It also enables employees with little cybersecurity experience to build corporate tools independently, creating “shadow AI” that is difficult for IT departments to control. Without authentication, such applications can directly expose medical and financial information, as well as internal presentations. The risk stems from poor deployment and access management, rather than platform vulnerabilities.

A recent RedAccess survey found that more than 5,000 Vibe Coding applications were accessible over the public internet without basic authentication, including about 2,000 tools built for corporate use. Their exposure of sensitive data shows that employee-built tools have become a gap in corporate cybersecurity governance. Companies need to immediately inventory public endpoints, add authentication and restrict data-access permissions.