Explore Problems

Showing 5 of 6,868 problems · matching your filters

AI coding agents leak secrets by pulling .env files into context

AI coding agents routinely read .env files, config, and command output into their context windows, silently exposing API keys and credentials to model providers. Existing secret scanning tools catch leaks after the fact in git history rather than preventing them from reaching the model in real time.

1 mentions1 sources
S6.3L8
Security & Compliance · Data Privacy

B2B Contact Data Decays Too Fast for Timing-Sensitive Outreach

Sales prospecting tools like Apollo and Clay rely on static enrichment databases that quickly become stale, causing outreach to hit outdated emails, wrong job titles, and departed contacts. Teams running timing-sensitive campaigns — hiring triggers, funding announcements, product launches — need live web research at query time to act on signals before they expire. No major tool currently solves real-time enrichment at scale.

1 mentions1 sources
S6.1L8
Business Operations · Sales & CRM

AI-generated vibe-coded apps ship with live security holes

Applications built quickly with AI coding tools like Replit, Lovable, and Cursor often go to production with unaddressed access-control vulnerabilities, and their builders typically lack security expertise. High engagement (532 upvotes) suggests broad resonance, though it surfaces via a solution launch rather than direct user complaints.

1 mentions1 sources
S6.1L8
Security & Compliance · Application Security

AI Agents Execute Sensitive Actions Without Human Approval Checkpoints

Professionals using AI agents for real work find that autonomous systems take irreversible actions — sending emails, modifying files, triggering integrations — without pausing for human review. The lack of approval gates on sensitive operations creates trust and safety barriers that prevent enterprise adoption. Workers need AI that asks before acting on consequential decisions.

1 mentions1 sources
S6.1L8
Productivity · Automation & Workflows

AI systems leak user data through indirect prompt injection

LLM-integrated applications can expose user data to third parties even when users provide no malicious input, due to prompt injection via untrusted content or model memorization. This is a structural vulnerability in how AI is embedded in SaaS products. Every team deploying LLMs without robust output filtering is at risk.

1 mentions1 sources
S6.0L8
Security & Compliance · Data Privacy