Meta Muse exposes users' personal and business secrets when they share conversations
Claroc researchers said a shared URL design let them enumerate 6,800 Muse links and expose sensitive notes and business records.
- On Monday, Meta paused its Muse AI agent's conversation-sharing feature after researchers discovered 6,800 shared links were publicly accessible via passive DNS searches, exposing sensitive user data.
- Security firm Claroc found that Muse URLs contained conversation titles in the subdomain, allowing anyone to enumerate links using passive DNS records and bypassing the intended security of random identifiers.
- Researchers accessed diverse private documents, including a marketing firm's revenue review, loan applications, and staff vacation calendars. Claroc noted, "If you had asked us beforehand, we would have guessed that gathering these would take real effort."
- Meta spokesperson Tracy Clayton stated, "we've paused this functionality while we review this report and consider changes to how these links can be discovered." Researchers later confirmed they could no longer access previously identified links.
- The incident follows Meta CEO Mark Zuckerberg's claim last month that Muse was "built from the ground up for privacy and security," though similar privacy issues have previously affected ChatGPT, Claude, and Grok.
13 Articles
13 Articles
Meta pauses Muse sharing after researchers find AI chats on the web
Meta says it paused a Muse feature that lets you share conversations with the AI assistant after researchers found the URLs publicly available on the web, as reported by Ars Technica. In a report published this week, researchers at the security firm Claroc say they found more than 6,800 Muse links through public DNS records. […]
Claroc researchers said that a single consultation allowed them to locate 6,800 shared conversation links in Meta Muse. After reviewing a few hundred, they said they had found business documents, financial data and a work schedule. Meta paused the function while reviewing the report.
Claroc found 6,800 links from Agent Muse with a passive DNS query; Meta suspended sharing to fix the failure
Coverage Details
Bias Distribution
- 67% of the sources lean Left
Factuality
To view factuality data please Upgrade to Premium
