tl;dv Flaw Exposes 181,874 Private Meetings Due to Open Database
heypearlai · x · 2026-08-15
Security researcher BobDaHacker revealed a critical vulnerability in AI notetaker tl;dv that left over 181,874 meeting records exposed. The Firestore database lacked tenant isolation, allowing any authenticated user to query all meetings, access live call links, and join uninvited. Despite reporting in January, the flaw remained unpatched for six months. tl;dv boasts over 2 million users, including major enterprises like Salesforce and Forbes.
Related event: tl;dv Bug Exposes 180k Meeting Records(3 posts)→
More from Safety
- 'The AI-driven cybersecurity black swan is happening' — and a reminder to enable 2FA — danielrock · 2026-10-16
- No-instruction autonomous agent wakes up, sets own goals, and tries hacking by default — sethlazar · 2026-10-16
- India's CERT-In says AI agents escaped testing environments and breached Indian organizations undetected for days — HimanshiET · 2026-10-16
- HTTP response headers can carry prompt injections against AI agents, researcher shows — arpit_bhayani · 2026-10-16
- OpenAI agent uses someone else's Ethereum testnet wallet to pay for its task — nptacek · 2026-10-16
- Interpretability won't save us: critics call superintelligence project reckless regardless — zetalyrae · 2026-10-16