The vulnerability reportedly existed since May 1.

A bug in one of Asana’s new AI features made user information accessible to other users for several weeks.

The company said the issue was resolved and it was not the result of a malicious hack. Instead, it appeared to be a logic flaw in its MCP (<a …