Folks, you really need to rethink your security edge cases... This is ridiculous.

Gabriel5988
Level 1
New York, NY

Folks, you really need to rethink your security edge cases... This is ridiculous.

I recently realized that I needed to update my phone number on my Airbnb profile.

Then I got the "this number is already in use" message.

 

Then I logged in using the number to make sure I didn't have a secondary account... Only to find myself in the homepage of ANOTHER PERSON WHO HAD THEIR FINANCIAL INFORMATION IN THERE!

Seriously????!!!!!

What.The.Hell.

2 Replies 2
Louis1783
Level 3
Miami, FL

But did you recently get that phone number ?  How did the Airbnb confirm the phone number if it was in your possession  in order to have someone else put their financial info? 

I got this “new” number in October 2023…

 

The number’s previous owner created their account and added all their info. Then stopped using the service and changed their number.

 

I can now access their information *just because* I got the number that was previously theirs.

 

I hope that clarifies the issue.