Can Base44 apps be hacked?

Base44 apps can be vulnerable to attacks if developers do not implement proper security measures beyond what the platform provides by default. Like any no-code or low-code platform, the generated application code may contain common web vulnerabilities such as insecure API endpoints, missing input validation, or weak authentication flows. The shared hosting infrastructure also means that a misconfiguration in one app could potentially expose data if isolation is not properly enforced. UNPWNED checks externally observable exposure, configuration, dependency, endpoint, CORS, form, rate-limit, and error-disclosure signals. Internal validation, authentication, and tenant isolation require direct review.