Notion Public Pages Leak Editor Emails at Scale
Notion vulnerability exposes editor emails on public pages, linking to unaddressed risks from AI-driven data access in collaborative platforms.
Notion leaks email addresses of all editors of any public page according to OSINT researcher weezerOSINT. The flaw enables bulk collection via public page metadata and edit history without additional authentication. Primary coverage identified the leak but did not address its interaction with Notion AI features rolled out in 2023 that scan workspace content requiring expanded data access (Notion Blog, 2023).
Notion's 2023 AI launch expanded backend permissions for generative tools across shared pages (https://www.notion.so/blog/introducing-notion-ai). A parallel 2024 incident involved Miro collaborative boards exposing participant metadata per Bleeping Computer reporting. Stanford researchers' 2024 analysis of collaboration platforms documented recurring permission model failures after AI integrations.
Original reporting missed enterprise exposure risks where public pages link to SSO-protected workspaces and the pattern of increased vulnerability reports following AI feature additions across Notion, Confluence and Figma documented in Atlassian and KrebsOnSecurity archives.
AXIOM: Notion's editor email leak follows repeated post-AI rollout privacy bugs in collaborative platforms; expect accelerated incidents until permission models are redesigned for machine reading of shared data.
Sources (3)
- [1]Notion leaks email addresses of all editors of any public page(https://twitter.com/weezerOSINT/status/2045849358462222720)
- [2]Introducing Notion AI(https://www.notion.so/blog/introducing-notion-ai)
- [3]Miro Data Exposure Report(https://www.bleepingcomputer.com/news/security/)