Over 181,000 AI meeting recordings left wide open in note taking app

A security researcher discovered that over 181,000 AI meeting recordings on the tl;dv platform were exposed due to a lack of tenant isolation in their Firestore database, allowing any authenticated user to access meetings across all accounts. The vulnerability enabled attackers to view live conference IDs and join active calls uninvited, with roughly 1,000 live meetings exposed at any given time. The researcher reported the issue in January 2026 but stated it remained unfixed as of July 2026, with the platform storing sensitive content from government meetings, job interviews, and strategy sessions across 35,000+ email domains.