Meta has paused a feature in its Muse AI assistant that allows users to share conversations after security researchers discovered the links were publicly accessible on the web, according to The Verge.
In a report published this week, researchers at security firm Claroc said they found more than 6,800 Muse conversation links through public DNS records. According to The Verge, the researchers were able to view hundreds of conversations, including some containing sensitive information such as a marketing company’s revenue review, a small business owner’s loan application, a workplace’s full-year staff calendar, and notes for a job candidate’s call with an AI lab.
The vulnerability stemmed from how Meta designed the shareable links. “Muse builds each share’s web address from the share’s title, a short phrase describing the conversation, then a random ID,” Claroc explained, according to The Verge. This structure, combined with information in the hostname, allowed researchers to reconstruct links by searching public DNS records.
Muse spokesperson Tracy Clayton told The Verge: “People have the ability to share specific Muse artifacts, which creates a page that can be accessed by those with the link. However, we’ve paused this functionality while we review this report and consider changes to how these links can be discovered.”
According to The Verge, this isn’t the first instance of AI chat-sharing features making conversations more public than intended, as conversations with OpenAI’s ChatGPT, Anthropic’s Claude, and xAI’s Grok have previously appeared on Google Search.