Tl;dv: Over 180k meetings left wide open
Hacker News
Read full postThe AI meeting recording app tl;dv has a major security flaw: its Firestore database lacks tenant isolation, allowing any authenticated user to access over 181,000 meeting recordings, including live conference IDs. This vulnerability lets unauthorized individuals join active calls uninvited, as demonstrated by a security researcher who accessed meetings from the Malaysian Ministry of Education and a US university startup session. Despite reporting the issue in January 2026, the database remains,




