The bug was responsibly disclosed by Sandeep Hodkasia, founder of security testing firm AppSecure. He identified the flaw on December 26, 2024, and Meta deployed a fix nearly a month later, on January 24, 2025.
Meta fixes privacy bug in AI chatbot that exposed user prompts
