tl;dv Flaw Exposes 181,874 Private Meetings Due to Open Database
heypearlai · x · 2026-08-15
Security researcher BobDaHacker revealed a critical vulnerability in AI notetaker tl;dv that left over 181,874 meeting records exposed. The Firestore database lacked tenant isolation, allowing any authenticated user to query all meetings, access live call links, and join uninvited. Despite reporting in January, the flaw remained unpatched for six months. tl;dv boasts over 2 million users, including major enterprises like Salesforce and Forbes.
Related event: tl;dv Bug Exposes 180k Meeting Records(3 posts)→
More from Safety
- Phalanx Security Arena: Attack a Protected LLM vs. Unprotected Model — TheWrongSudoku · 2026-08-15
- AI cyber defense advantage window may close in 2 years — chrisrohlf · 2026-08-15
- Google open-sources homomorphic encryption compiler for secure inference — DynamicWebPaige · 2026-08-15
- Debate on using AI in academic peer review and disclosure norms — lpachter · 2026-08-15
- OpenAI alerted FBI after user threatened to murder ex — KeanuRave100 · 2026-08-15
- Sanders' letter to tech giants urges AI pause, criticized as fearmongering — DryDeer775 · 2026-08-15