tl;dv flaw exposed 181,874 meeting records and live-call IDs, researcher says
The access-control failure reportedly persisted for six months as the AI notetaker marketed SOC 2 compliance to more than 2 million users.
By Ryan Merket · Published
Primary source: BobDaHacker
Why it matters
AI meeting assistants are becoming repositories for corporate memory. A single tenant-isolation error can expose live-call details across thousands of organizations.
Raphael Allstadt (@rallstadt), Allan Bettarel and Carlo Thissen are confronting a security failure at tl;dv that allegedly allowed any authenticated user to query meeting records from other customers and obtain IDs for live calls.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.