Meta suspends Muse chat sharing after 6,800 links exposed private details

Meta introduced its Muse agentic AI platform last month. Claroc researchers found that the sharing links could be discovered because all the URLs used the same domain name and placed the conversation's title in the subdomain. Passive DNS records show how human-readable domains resolve to browser-readable IP addresses, functioning like an internet phone book.

"Muse names each share's web address after the conversation's own title, and that address is written into public DNS," Claroc said in a blog post. "One passive-DNS search brings back thousands of them, listed by name, like a table of contents."

Claroc said it was able to enumerate 6,800 links for shared Muse chats and view private information from both business and personal applications of the service. The exposed details included meeting times with a frontier AI lab, a small-business loan application, a bank fraud alert with partial account details, a company's vacation calendar and other internal company documents.

Ars Technica first reported on Claroc's findings. In a statement to the publication, Meta said, "we've paused this functionality while we review this report and consider changes to how these links can be discovered." Claroc also noted that its researchers were unable to open a sampling of the links they had previously accessed following Meta's update.