HomeMeta Fixes Bug That Exposed Users' AI Data
Meta has resolved a security vulnerability that allowed its AI chatbot users to access and view the private prompts and generated responses of other users.
Sandeep Hodkasia, founder of the security testing firm AppSecure, exclusively informed TechCrunch that Meta awarded him a $10,000 bug bounty for privately reporting the issue, which he filed on December 26, 2024.
According to Hodkasia, Meta implemented a fix on January 24, 2025, and found no indication that the vulnerability had been exploited maliciously.
Hodkasia explained to TechCrunch that he discovered the bug while exploring how Meta AI lets logged-in users edit their prompts to regenerate text and images. He noticed that when a user edits a prompt, Meta's backend servers assign it and its AI-generated response a unique numeric identifier. By monitoring his browser's network traffic during an edit, Hodkasia found he could alter this identifier, causing the servers to return the prompt and response of a completely different user.
This flaw meant Meta's servers failed to properly verify whether a user was authorized to view a specific prompt and its response. Hodkasia stated the prompt identifiers generated by Meta's servers were "easily guessable," which could have allowed a malicious actor to scrape users' original prompts by rapidly cycling through numbers with automated tools.
When contacted by TechCrunch, Meta confirmed the fix was deployed in January. "We found no evidence of abuse and rewarded the researcher," Meta spokesperson Ryan Daniels stated.
This security issue emerges as major technology companies race to launch and improve their AI products, many of which carry significant security and privacy risks.
Meta AI's standalone app, introduced earlier this year to compete with rivals like ChatGPT, encountered a bumpy launch after some users accidentally shared conversations they believed were private.
Techcrunch event LIVE NOW! TechCrunch All Stage
Build smarter. Scale faster. Connect deeper. Join visionaries from Precursor Ventures, NEA, Index Ventures, Underscore VC, and beyond for a day packed with strategies, workshops, and meaningful connections.
Save $450 on your TechCrunch All Stage pass
Build smarter. Scale faster. Connect deeper. Join visionaries from Precursor Ventures, NEA, Index Ventures, Underscore VC, and beyond for a day packed with strategies, workshops, and meaningful connections.
Boston, MA | July 15 REGISTER NOW
Related article
Meta's Muse outpaces ChatGPT in early mobile launch
New data suggests Meta’s latest AI app, Muse, could become the social giant’s next major success. According to recent estimates from Appfigures, Muse has been downloaded on mobile devices more times in its first twelve days than ChatGPT did in the tw
Meta’s Muse arrives on Mac, enabling AI to perform actions on your computer
Meta’s latest AI assistant, Muse, is now live on Mac.On macOS, Muse integrates with your files, messages, calendar, notes, and mail, operating directly within their native apps.This desktop release follows Muse’s mobile and web debut earlier this mon
Zuckerberg expands Meta’s enterprise AI vision beyond agents
In June, Meta launched a new AI agent for enterprises, designed to assist with customer service, support, and daily operations. However, CEO Mark Zuckerberg revealed to investors on Wednesday’s second-quarter earnings call that the company’s enterpri
Related Special Topic Recommendations
Design & Art
Top AI Illustration Tools: Create Editorial Scenes and Cover Art Faster
2026 Latest Top-rated AI Illustration Tools: Our curated list features the best powerfully designed tools for creating stunning editorial scenes and eye-catching cover art quickly. Each option has gone through rigorous real-world tests, offering a free vs paid comparison to help you find the perfect match for your workflow. Try these must-try solutions today to unlock your AI edge and boost your creative productivity. Explore now at XIX.AI.
10 tools
xix.ai
Education and Learning
Top AI Tutors for Exam Prep: Practice Math, Science, and English
2026 Latest Top-Rated Best AI Tutors for Exam Prep are here on XIX.AI! Our curated list features powerful game-changing tools that offer free vs paid comparison, real-world tests, and weekly updated rankings. They help boost your writing efficiency, simplify complex topic learning, and unlock your academic potential. Explore now to Discover your perfect exam prep tool and Start creating today to Unlock your AI edge!
10 tools
xix.ai
Finance
AI Budget Planning Tools for Personal Money Management
2026 Latest Best Top-Rated AI Budget Planning Tools for Personal Money Management are here on XIX.AI! This curated collection features powerful, game-changing solutions that help you conduct real-world tests, understand spending habits, and create personalized plans to boost productivity. Enjoy a free vs paid comparison along with detailed rankings. Must-try tools designed to simplify money management and unlock your AI edge. Explore now!
11 tools
xix.ai
Health & Wellness
AI Sleep Tracking Assistants: Improve Recovery with Better Bedtime Habits
2026 Latest Best Top-Rated AI Sleep Tracking Assistants curated for ultimate recovery. This fully updated weekly guide features powerful tools that deliver real-world tests, free vs paid comparison, and detailed rankings to help you find the must-try solution that boosts sleep quality and supports better bedtime habits. Explore now at XIX.AI to Unlock your AI edge.
10 tools
xix.ai
Data Analysis
AI SQL Copilots for Product and Revenue Analytics
2026 Latest Best Top-Rated AI SQL Copilots for Product and Revenue Analytics! XIX.AI has curated a powerful, game-changing collection of must-try tools that undergo real-world tests through weekly updated rankings. These tools help users boost productivity significantly by accelerating data analysis, streamlining complex queries, and generating accurate insights to drive smarter business decisions. Explore now to Discover your perfect tool for unlocking your AI edge!
14 tools
xix.ai
Education and Learning
Best AI Homework Helpers That Teach: Learn Concepts, Not Just Answers
2026 Latest Best Top-Rated AI Homework Helpers That Teach Core Concepts Not Just Answers Powerful Tools for Students Must-Try Curated List Weekly Updated Free vs Paid Comparison Real-World Tests Accurate Rankings to Help You Unlock Your Full Learning Potential Explore now to Discover your perfect tool for smarter studying.
10 tools
xix.ai
Comments (1)
0/500
![RaymondBaker]()
Krass, die Bug hatte ja richtig Potenzial für Drama 😅 Einerseits beeindruckend, wie schnell Meta das behoben hat, andererseits fragt man sich doch: Ist das nur die Spitze des Eisbergs? In jeder KI-Assistenten-Funktion stecken solche Datenschnittstellen versteckt. Das Problem ist ja nicht der Einzelfall, sondern dass immer wieder solche Lecks auftauchen. Als Nutzer bekommt man da langsam ein mulmiges Gefühl... Wäre vielleicht cool, wenn es transparente Protokolle gäbe, an denen unabhängige Sicherheitsforscher dauerhaft mitwirken könnten. So nach dem Motto: Vertrauen ist gut, Kontrolle ist besser 💡
Meta has resolved a security vulnerability that allowed its AI chatbot users to access and view the private prompts and generated responses of other users.
Sandeep Hodkasia, founder of the security testing firm AppSecure, exclusively informed TechCrunch that Meta awarded him a $10,000 bug bounty for privately reporting the issue, which he filed on December 26, 2024.
According to Hodkasia, Meta implemented a fix on January 24, 2025, and found no indication that the vulnerability had been exploited maliciously.
Hodkasia explained to TechCrunch that he discovered the bug while exploring how Meta AI lets logged-in users edit their prompts to regenerate text and images. He noticed that when a user edits a prompt, Meta's backend servers assign it and its AI-generated response a unique numeric identifier. By monitoring his browser's network traffic during an edit, Hodkasia found he could alter this identifier, causing the servers to return the prompt and response of a completely different user.
This flaw meant Meta's servers failed to properly verify whether a user was authorized to view a specific prompt and its response. Hodkasia stated the prompt identifiers generated by Meta's servers were "easily guessable," which could have allowed a malicious actor to scrape users' original prompts by rapidly cycling through numbers with automated tools.
When contacted by TechCrunch, Meta confirmed the fix was deployed in January. "We found no evidence of abuse and rewarded the researcher," Meta spokesperson Ryan Daniels stated.
This security issue emerges as major technology companies race to launch and improve their AI products, many of which carry significant security and privacy risks.
Meta AI's standalone app, introduced earlier this year to compete with rivals like ChatGPT, encountered a bumpy launch after some users accidentally shared conversations they believed were private.
Techcrunch eventLIVE NOW! TechCrunch All Stage
Build smarter. Scale faster. Connect deeper. Join visionaries from Precursor Ventures, NEA, Index Ventures, Underscore VC, and beyond for a day packed with strategies, workshops, and meaningful connections.
Save $450 on your TechCrunch All Stage pass
Build smarter. Scale faster. Connect deeper. Join visionaries from Precursor Ventures, NEA, Index Ventures, Underscore VC, and beyond for a day packed with strategies, workshops, and meaningful connections.
Boston, MA | July 15 REGISTER NOW
Meta's Muse outpaces ChatGPT in early mobile launch
New data suggests Meta’s latest AI app, Muse, could become the social giant’s next major success. According to recent estimates from Appfigures, Muse has been downloaded on mobile devices more times in its first twelve days than ChatGPT did in the tw
Meta’s Muse arrives on Mac, enabling AI to perform actions on your computer
Meta’s latest AI assistant, Muse, is now live on Mac.On macOS, Muse integrates with your files, messages, calendar, notes, and mail, operating directly within their native apps.This desktop release follows Muse’s mobile and web debut earlier this mon
Zuckerberg expands Meta’s enterprise AI vision beyond agents
In June, Meta launched a new AI agent for enterprises, designed to assist with customer service, support, and daily operations. However, CEO Mark Zuckerberg revealed to investors on Wednesday’s second-quarter earnings call that the company’s enterpri
2026 Latest Top-rated AI Illustration Tools: Our curated list features the best powerfully designed tools for creating stunning editorial scenes and eye-catching cover art quickly. Each option has gone through rigorous real-world tests, offering a free vs paid comparison to help you find the perfect match for your workflow. Try these must-try solutions today to unlock your AI edge and boost your creative productivity. Explore now at XIX.AI.
10 tools
xix.ai
2026 Latest Top-Rated Best AI Tutors for Exam Prep are here on XIX.AI! Our curated list features powerful game-changing tools that offer free vs paid comparison, real-world tests, and weekly updated rankings. They help boost your writing efficiency, simplify complex topic learning, and unlock your academic potential. Explore now to Discover your perfect exam prep tool and Start creating today to Unlock your AI edge!
10 tools
xix.ai
2026 Latest Best Top-Rated AI Budget Planning Tools for Personal Money Management are here on XIX.AI! This curated collection features powerful, game-changing solutions that help you conduct real-world tests, understand spending habits, and create personalized plans to boost productivity. Enjoy a free vs paid comparison along with detailed rankings. Must-try tools designed to simplify money management and unlock your AI edge. Explore now!
11 tools
xix.ai
2026 Latest Best Top-Rated AI Sleep Tracking Assistants curated for ultimate recovery. This fully updated weekly guide features powerful tools that deliver real-world tests, free vs paid comparison, and detailed rankings to help you find the must-try solution that boosts sleep quality and supports better bedtime habits. Explore now at XIX.AI to Unlock your AI edge.
10 tools
xix.ai
2026 Latest Best Top-Rated AI SQL Copilots for Product and Revenue Analytics! XIX.AI has curated a powerful, game-changing collection of must-try tools that undergo real-world tests through weekly updated rankings. These tools help users boost productivity significantly by accelerating data analysis, streamlining complex queries, and generating accurate insights to drive smarter business decisions. Explore now to Discover your perfect tool for unlocking your AI edge!
14 tools
xix.ai
2026 Latest Best Top-Rated AI Homework Helpers That Teach Core Concepts Not Just Answers Powerful Tools for Students Must-Try Curated List Weekly Updated Free vs Paid Comparison Real-World Tests Accurate Rankings to Help You Unlock Your Full Learning Potential Explore now to Discover your perfect tool for smarter studying.
10 tools
xix.ai
Krass, die Bug hatte ja richtig Potenzial für Drama 😅 Einerseits beeindruckend, wie schnell Meta das behoben hat, andererseits fragt man sich doch: Ist das nur die Spitze des Eisbergs? In jeder KI-Assistenten-Funktion stecken solche Datenschnittstellen versteckt. Das Problem ist ja nicht der Einzelfall, sondern dass immer wieder solche Lecks auftauchen. Als Nutzer bekommt man da langsam ein mulmiges Gefühl... Wäre vielleicht cool, wenn es transparente Protokolle gäbe, an denen unabhängige Sicherheitsforscher dauerhaft mitwirken könnten. So nach dem Motto: Vertrauen ist gut, Kontrolle ist besser 💡
