Meta Muse share links expose private conversations
Researchers listed 6,800 share links through public DNS records, and Meta has paused the feature.
Labs#03
6,800
share links enumerated by researchers
Image: Ars Technica
6,800share links enumerated by researchers
The short version
- Researchers from Claroc reported that Muse, Meta's general-purpose AI agent, can expose sensitive information when users share conversations through web links.
- The researchers enumerated 6,800 share links and found information not meant to be public after opening a few hundred of them.
- Each share link includes the conversation title in its URL, and public passive DNS records make those links searchable.
- Meta said it has suspended the sharing feature while it reviews the report and considers changes.
Why it matters
Muse requires access to most of a user's accounts to work as intended, so exposed shares carry more risk. The article also notes a separate zero-day that let other apps take control of a Muse account.
“It took one query.”