TLDR InfoSec · MISCELLANEOUS

META FIXES BUG THAT COULD LEAK USERS' AI PROMPTS AND GENERATED CONTENT

techcrunch.com2 min read

Summary from the TLDR InfoSec newsletter

Meta fixed a security bug that allowed users to access other users' private AI prompts and responses by manipulating unique prompt numbers. Security researcher Sandeep Hodkasia discovered the vulnerability in December and received a $10,000 bug bounty. Meta deployed the fix in January after finding no evidence of malicious exploitation of the flaw.