Meta’s personal AI agent Muse has been hit by a privacy flaw that allowed chat-sharing links to be discovered in bulk, according to U.S. cybersecurity firm Claroc. The researchers said a single query of a DNS history database returned more than 6,800 share links tied to Muse conversations. After reviewing several hundred entries, Claroc said it found dozens of sensitive documents, including internal corporate revenue reports, small-business loan applications, and preparation materials for a candidate’s confidential recruiting discussions with a frontier AI lab, complete with internal contacts and meeting times.
Claroc said the issue stemmed from Muse’s sharing design. When a user shared a chat, the system generated a public page that did not require login and embedded the chat title and a random ID in the domain. Once opened, the full domain could be logged by third-party DNS services. Claroc reported the issue to Meta on Oct. 8 and published its research on Oct. 18. Meta confirmed it had paused the chat-sharing feature on Oct. 20 after Ars Technica asked about the matter. A same-day recheck found 40 previously accessible links had stopped working, though chat titles remained visible in DNS history records.
Meta’s personal AI agent Muse exposed chat-sharing links that could be discovered in bulk by outsiders, according to U.S. cybersecurity firm Claroc. The researchers said a single query of a DNS history database returned more than 6,800 share links.
After sampling several hundred entries, Claroc said it found dozens of sensitive files. Those included internal corporate revenue reports, small-business loan applications, and preparation materials tied to a candidate’s confidential recruiting discussions with a frontier AI lab. Internal contacts and meeting times were also exposed.
How the share links became discoverable
When users asked Muse to share a chat, the system generated a web page that could be viewed without logging in. It also placed the chat title and a random ID into the domain. Once someone opened that page, the full domain could be recorded by third-party DNS services. Claroc said it was able to retrieve the otherwise hard-to-guess share addresses by searching those historical records.
Muse did instruct search engines not to index the pages, but that did not stop the domains from being logged by other services.
Meta paused the feature after media inquiry
Claroc said it reported the flaw to Meta on Oct. 8 and published its research on Oct. 18. Meta did not confirm that it had paused the chat-sharing feature until Oct. 20, after U.S. tech outlet Ars Technica asked about the issue.
Claroc said it rechecked 40 links on the same day that had previously opened without login and found that all of them had been disabled. Even so, the chat titles were still present in DNS history records.
Meta CEO Mark Zuckerberg said last month that Muse was a product 「designed for privacy and security from the ground up」.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
