AI Incident Database: Meta AI Bug in Deployed Service Reportedly Allowed Potential Access to Other Users' Prompts and Responses
A security researcher reported a vulnerability in Meta AI's deployed chatbot service that, under certain conditions, could allow an unauthorized user to view another user's prompts and AI-generated responses. The flaw reportedly involved guessable prompt IDs and insufficient server-side authorization checks. Meta reportedly fixed the issue in January 2025 and found no evidence of malicious exploitation, awarding the researcher a bug bounty.
AI Incident Database · Incident 1172Operator lens (medium): inspect D2 (output validation), D6 (autonomy oversight), D7 (tool permissions).
Event summary
A security researcher reported a vulnerability in Meta AI's deployed chatbot service that, under certain conditions, could allow an unauthorized user to view another user's prompts and AI-generated responses. The flaw reportedly involved guessable prompt IDs and insufficient server-side authorization checks. Meta reportedly fixed the issue in January 2025 and found no evidence of malicious exploitation, awarding the researcher a bug bounty.
Linked entities
- Meta
vendor | 70%
- chatbot-developers
organisation | 70%
- large-language-model-developers
organisation | 70%
- meta-users
organisation | 70%
- general-public
organisation | 70%
- meta-ai-users
organisation | 70%
Related graph edges
| Edge | Type | Confidence |
|---|---|---|
| ent-aiid-large-language-model-developers to ent-psf-d1 | maps to | 60% |
| ent-aiid-large-language-model-developers to ent-psf-d1 | maps to | 60% |
| ent-aiid-large-language-model-developers to ent-psf-d1 | maps to | 60% |
| ent-aiid-large-language-model-developers to ent-psf-d2 | maps to | 60% |
| ent-aiid-large-language-model-developers to ent-psf-d2 | maps to | 60% |
| ent-aiid-large-language-model-developers to ent-psf-d2 | maps to | 60% |
| ent-aiid-large-language-model-developers to ent-psf-d6 | maps to | 60% |
| ent-aiid-large-language-model-developers to ent-psf-d6 | maps to | 60% |
| ent-aiid-large-language-model-developers to ent-psf-d6 | maps to | 60% |
| ent-vendor-meta to ent-psf-d1 | maps to | 60% |
| ent-vendor-meta to ent-psf-d1 | maps to | 60% |
| ent-vendor-meta to ent-psf-d1 | maps to | 60% |