Meta Pulls Muse Sharing After 6,800 Chats Leak
Meta paused Muse chat sharing after security firm Claroc found 6,800+ shared conversation links exposed online through public DNS records, leaking private chats
Meta has paused the conversation-sharing feature of its Muse AI agent after security researchers found thousands of private chats sitting exposed on the open web. The researchers counted more than 6,800 share links, and hundreds of them contained sensitive business and personal details that their owners likely never meant to make public.
How the share links leaked
Muse lets users share a conversation by generating a link. Normally, such links are safe because they are long, random and hard to find. Muse links, however, were built from the conversation's own title placed directly in the web address's subdomain, under a domain like cf.metaaiusercontent.com. Because the titles were descriptive - things like "q3-revenue-review" - the hostname itself often revealed what the page contained before anyone even opened it. Worse, those hostnames were written into public passive DNS records, the internet's directory of web traffic. That meant a single passive DNS search could return thousands of share links, listed by name like a table of contents. The researchers called the results "GhostShares": pages that open for people who never received the link.
What the researchers found
Security firm Claroc published its findings on October 18, saying one DNS query surfaced around 6,800 shared conversation links. The team opened a few hundred of them. Most were ordinary, but some contained genuinely sensitive material. Among the exposed items were a marketing company's revenue review, a small business owner's loan application, a bank fraud alert with partial account details, a workplace's full-year staff calendar, and notes for a job candidate's call with a frontier AI lab, including the lab's internal contact and meeting time. No login or hacking tools were needed to reach any of it.
Meta's response
Meta confirmed the problem and moved quickly. A Meta spokesperson told reporters the company has "paused this functionality while we review this report and consider changes to how these links can be discovered." The sharing feature is offline while that review plays out. Claroc noted that its researchers could no longer open a sampling of the links they had previously accessed after Meta pushed the update, suggesting the old share URLs have been cut off at the source.
What users should know
The incident is a reminder that sharing AI conversations can leak more than expected. AI agents like Muse have access to calendars, professional messages and connected services, so a shared chat can carry business data far beyond the visible text. Users should treat any link-based sharing as potentially public, and delete or unshare sensitive conversations where possible.
Sources
Engadget - https://www.engadget.com/2292281/meta-suspends-muse-chats-sharing-feature-after-it-left-private-details-exposed/ Gadget Review - https://www.gadgetreview.com/share-a-chat-leak-your-company-secrets-how-meta-muse-is-broadcasting-your-private-life-to-the-world