Meta pauses Muse chat sharing after researchers find 6,800 shared links through public DNS
Meta has paused the feature in its Muse AI assistant that lets people share a conversation through a link. The pause followed a report from security firm Claroc that found more than 6,800 Muse share links through public DNS records.
Claroc says Muse builds each share address from the conversation title plus a random ID, and puts that in the hostname under cf.metaaiusercontent.com. Because public DNS records hostnames, a passive DNS search was enough to list the links. Ars Technica reports the researchers said it took one query.
After opening a few hundred of the links, the researchers say they found material that was not meant to be public, including a marketing company's internal revenue review, a small-business loan application, a staff vacation calendar and a bank fraud alert with a partial account number.
Claroc co-founder and CTO Asaf Aprozper told Ars he reported the issue through Meta's bug bounty program on October 8 and got no reply. Meta said it has paused the sharing function while it reviews the report and considers changes to how the links can be discovered.
Meta's statement says shared Muse artifacts create a page that anyone with the link can open. The Verge notes ChatGPT, Claude and Grok chats have also ended up in Google Search in the past.
What it means for buyers: Muse share links are reachable by anyone who learns the hostname, and this one was discoverable through DNS. Meta has not said when sharing will return or how links will change. Check what your team has already shared before relying on any assistant's link sharing for confidential material.