Meta has suspended the sharing feature in its Muse agentic AI platform after security researchers found that private conversations could be exposed. Muse launched last month, and users could share chats by generating a web link.
Researchers at security firm Claroc discovered that these links could be found through a passive DNS search. Passive DNS records map human-readable domain names to IP addresses, acting like a phone book for the internet. Because every shared Muse URL used the same domain and included the conversation's title in its subdomain, a single search returned thousands of links. Claroc said it was able to enumerate 6,800 shared chats.
The exposed material covered both business and personal use. It included meeting times with a frontier AI lab, a small-business loan application, a bank fraud alert with partial account details, a company vacation calendar and other internal documents. Claroc described the result as a table of contents for private data.
Meta told Ars Technica that it has paused the functionality while it reviews the report and considers changes to how these links can be discovered. Following the update, Claroc said its researchers could not open a sample of the links they had previously accessed.
Source: Engadget · Summarized by HeadlinesBriefing