Meta's Muse share links expose private conversations and Meta pauses the feature
AISecurity researchers at Claroc say Meta's Muse AI agent puts conversation titles in share-link subdomains, making 6,800 shared links discoverable through passive DNS searches. Exposed content included a loan application, a bank fraud alert and a staff vacation calendar.
AIWhy it matters.
The report shows how a common share-link design choice exposed sensitive conversations, a concrete lesson for anyone building or evaluating AI assistant sharing features.
Source details
Wired · AI · Dan Goodin, Ars Technica · wired.comPublished · added here
Original title: A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse