This is disaster from Meta AI.

Imagine being able to hack high profile accounts like White House, the U.S. Space Force, and Sephora simply by chatting with a support bot.

why would an AI chatbot be allowed to perform critical actions like changing the email address of an account in the first place?

Password resets, email changes, and account recovery are some of the most sensitive security operations. Handing that authority to a chatbot without robust verification seems like a disaster waiting to happen.

This is exactly why AI agents should have guardrails before they get access to real systems.

Source : 404