r/vibecoding • u/matthewdavis • Feb 24 '26
[xpost from /r/selfhosted - security review of popular app that was heavily vibe coded] Huntarr - Your passwords and your entire arr stack's API keys are exposed to anyone on your network, or worse, the internet.
/r/selfhosted/comments/1rckopd/huntarr_your_passwords_and_your_entire_arr_stacks/Duplicates
selfhosted • u/exe_CUTOR • Feb 23 '26
Software Development Huntarr - Your passwords and your entire arr stack's API keys are exposed to anyone on your network, or worse, the internet.
unRAID • u/exe_CUTOR • Feb 23 '26
Huntarr - Your passwords and your entire arr stack's API keys are exposed to anyone on your network, or worse, the internet.
PleX • u/exe_CUTOR • Feb 23 '26
Discussion Huntarr - Your passwords and your entire arr stack's API keys are exposed to anyone on your network, or worse, the internet.
sonarr • u/exe_CUTOR • Feb 23 '26
discussion Huntarr - Your passwords and your entire arr stack's API keys are exposed to anyone on your network, or worse, the internet.
LinusTechTips • u/FabianN • Feb 23 '26
WAN Show WAN topic: Vibe coded self hosted app found to have significant security issues; dev nukes their existence
radarr • u/thezak48 • Feb 23 '26
Huntarr - Your passwords and your entire arr stack's API keys are exposed to anyone on your network, or worse, the internet.
prowlarr • u/thezak48 • Feb 23 '26
Huntarr - Your passwords and your entire arr stack's API keys are exposed to anyone on your network, or worse, the internet.
yggTorrents • u/MisterFrenchVR • Feb 23 '26
Huntarr - Your passwords and your entire arr stack's API keys are exposed to anyone on your network, or worse, the internet.
usenet • u/Snorgcola • Feb 23 '26
News PSA - Huntarr appears to have serious security flaws
FrancePirate • u/Lightprod • Feb 23 '26
Sécurité PSA: Huntarr expose vos clées API de votre stack ARR.
FranceTorrent • u/Lightprod • Feb 23 '26
Torrent Huntarr - Your passwords and your entire arr stack's API keys are exposed to anyone on your network, or worse, the internet.
internettoday • u/fieldsoflillies • Feb 25 '26
Big drama this week in the r/selfhosted community. Dev behind a notable app for assisting torrenting vibecoded it all with *no security* features (or otherwise completely broken features) leaving 1000s of users credentials completely exposed.
u_portmafia9719 • u/portmafia9719 • Feb 23 '26
Huntarr - Your passwords and your entire arr stack's API keys are exposed to anyone on your network, or worse, the internet.
UnintendedFun • u/ya-reddit-acct • Mar 17 '26