Meta’s Muse AI agent exposed by enumerable share links, report says

Meta’s general-purpose AI agent Muse, launched last month, has been found to have a security flaw that may expose user conversations shared through web links. According to researchers at security firm Claroc, the links could be enumerated, allowing outside parties to access content that users likely did not intend to make broadly available. The researchers said they identified 6,800 share links created by Muse users and, after opening hundreds of them, found a large amount of sensitive material, including personal information and business secrets. The disclosure stands in contrast to comments made last month by Meta CEO Mark Zuckerberg, who said Muse was 「built for privacy and security from the ground up」. Ars Technica was cited as the source of the report in the Techub News item.