Meta Muse share links expose private conversations, Claroc researchers say

Security firm Claroc says it enumerated 6,800 shared conversation links from Meta's Muse AI agent using passive DNS records.

Several opened pages exposed sensitive material, including a bank fraud alert, a loan application, and property return figures. The researchers say a conversation title added to each share URL made the links easy to find, and that a single query was enough to surface them.

Meta CEO Mark Zuckerberg said last month that Muse was "built from the ground up for privacy and security." Claroc's findings, reported Monday, contradict that claim as applied to shared links.