Vibe coding security risks are no longer theoretical. A December 2025 study by Tenzai tested 15 applications built by the five most popular AI coding tools — Cursor, Claude Code, Replit, Devin, and OpenAI Codex — and found 69 security vulnerabilities across them. Every single tool introduced Server-Side Request Forgery. Zero of the 15 apps had...