closedclosed 14 Jun 2026Patch now3 Confirmed exploitationAI
Meta AI Support Bot Manipulated to Enable Instagram Account Takeovers
Meta AI Support Bot, Instagram
Hackers exploited Meta's AI support chatbot to compromise high-profile Instagram accounts by tricking it into modifying account recovery emails. Meta subsequently resolved the vulnerability.
- fix status
- Fix status unknown
- first report
- 31 May 2026
- last update
- 31 May 2026
Timeline · 1
Sources · 1
Research and catalogues
- 2026-05-31Meta AI Support Bot Reportedly Enabled Takeovers of High-Profile Instagram AccountsAI Incident Database · incidentdatabase.ai/cite/1510
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- Attack on AI
- categories
- Agent hijackPrompt injection
- severity
- 3 · Confirmed exploitation
- fix status
- Fix status unknown
- targets
- Meta, Enterprise deployment
- owasp llm top 10
- LLM01:2025 Prompt InjectionLLM06:2025 Excessive Agency
- dates
- happened 31 May 2026 · first reported 31 May 2026
- origin
- AI Incident DatabaseDerived from the AI Incident Database (CC BY-SA 4.0).
- record
- confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Meta AI Support Bot Manipulated to Enable Instagram Account Takeovers https://gcdradar.vercel.app/incidents/meta-ai-support-bot-manipulated-to-enable-instagram-account · AIR-2026-0401 · closed 2026-06-14 - Lane: Patch now - Severity: 3 (Confirmed exploitation) - Fix status: Fix status unknown - First reported: 2026-05-31 - AI role: Attack on AI - Products: Meta AI Support Bot, Instagram ## Summary Hackers exploited Meta's AI support chatbot to compromise high-profile Instagram accounts by tricking it into modifying account recovery emails. Meta subsequently resolved the vulnerability. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-05-31: Meta AI Support Bot Reportedly Enabled Takeovers of High-Profile Instagram Accounts (https://incidentdatabase.ai/cite/1510) ## Sources - 2026-05-31 AI Incident Database: Meta AI Support Bot Reportedly Enabled Takeovers of High-Profile Instagram Accounts https://incidentdatabase.ai/cite/1510 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedLenovo AI Chatbot Lena Cross-Site Scripting via Prompt Manipulation in Lenovo AI Chatbot
Research · since 18 Aug 2025
AI - liveMobileProbe: Adaptive Security Evaluation of Mobile Agents via Trajectory-Aware Injection
Research · since 13 Nov 2026
AI - livePrompt Injection, Esq.: pwning AI agent guardrails with lawyerspeak
Research · since 11 Nov 2026
AI - liveLLM agents Defending LLM Agents Against Parameter Poisoning
Research · since 4 Nov 2026
AI - liveLLM search agents Adversarial Self-Evolving Attacks on Search Agents
Research · since 4 Nov 2026
AI - liveLLM agents Weaponized Safety Warnings for Controlling AI Agents
Research · since 4 Nov 2026
AI