Bubba AI, Inc. 2261 Market Street, San Francisco, California, 94114 Evidence: Figure 8 - Unauthenticated request to the /api/users/comp-ai/ endpoint returning successful response without company user ’ s data. Figure 9 - Unauthenticated request to the /api/company/ endpoint returning successful response with company data. Vulnerability Remediation Status (02/19/2026): The vulnerability has been remediated, and the issue is now considered fixed.