Meta AI chatbot bug could have allowed anyone to see private conversations
ID: 2352f832-eb65-54dd-b79c-6175f86cfeeb
STIX ID: report--2352f832-eb65-54dd-b79c-6175f86cfeeb
Feed Name: Malwarebytes Blog
Threat Score
A researcher discovered and reported a bug in Meta AI that permitted retrieval of private user prompts and AI-generated responses by altering or guessing predictable query IDs; the flaw allowed viewing conversations that users had marked private because the server failed to verify authorization. The researcher received a $10,000 bounty and Meta fixed the issue on January 24, 2025, stating it found no evidence the bug was abused.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
