tl;dv leaves 181,874 meeting records exposed

tl;dv exposed metadata for 181,874 AI-recorded meetings belonging to 84,312 users, according to a security researcher who says any authenticated account could query the shared Firestore collection. The responsible-disclosure account says the records spanned 35,003 email domains and included roughly 1,000 meetings actively recording at a time; it reports the flaw remained open six months after notification, while recordings and transcripts were private by default. Builders applying least-privilege controls to agent runtimes should extend the same boundary to AI meeting stores: encryption and compliance badges cannot compensate for missing tenant isolation.