Matt Palmer

Record description

Matt Palmer authored the public statement on CVE-2025-48757. It describes the initial Linkable investigation, a broader scan of Lovable projects, a later unauthorized-write test and the disclosure correspondence. The account is important because it distinguishes exposed client credentials from the database policies that actually authorized the requests.

The reproduced correspondence identifies his Replit affiliation at the time and credits colleague Kody Low with related investigation. This record preserves that historical provenance without asserting a current employer. The disclosure is a primary research account, while the vendor's responsibility dispute and the limits of the sample remain separate qualifications.

Explicitly related research (2)

Declared connections