In brief: A Firebase misconfiguration in the AI meeting tool tl;dv allowed users to access other users’ meeting data and potentially other users’ video calls.
A misconfiguration in the Google Firebase integration of the AI meeting tool tl;dv allowed logged-in users to query meeting information belonging to other users and potentially join other users’ video calls. Recordings and metadata from government and corporate meetings were also affected.
According to Dark Reading, the AI note-taker tl;dv, which automatically transcribes and summarizes video calls, uses Google Firebase on the backend. A faulty configuration of this Firebase instance meant that any authenticated user of the service could submit queries that were not restricted to their own data. This made it possible to view meeting information from other accounts, and in certain cases even to join ongoing or recorded calls.
For security leaders, this case is relevant because AI-powered meeting assistants now have broad access to sensitive conversation content in government and enterprise environments. A single configuration error in the backend infrastructure of such a third-party tool can thus strip the confidential nature from entire series of meetings, including transcripts, summaries, and audio or video recordings. Because these tools are often introduced into organizations without a separate security review, this creates a blind spot in asset and data protection management.
For CISOs, this creates the need to incorporate deployed AI note-taking tools and similar SaaS add-ons into existing third-party risk assessments, particularly with regard to backend configuration, database-level access controls, and tenant separation. Organizations using tl;dv or comparable services should check whether a patch or configuration fix has been issued by the provider, and assess the scope of any potential unauthorized access within their own environment.
Source: www.darkreading.com · Published August 4, 2026
Lumi AI News — AI-assisted curation in accordance with Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.8.3.