Meta pauses Muse sharing feature after privacy leak
Researchers found thousands of web addresses for shared pages; several hundred pages were accessible without an account.
Listen to this article
There is no audio version yet. Request one and an AI voice will read the article aloud.
Read by an AI voice.
Meta has temporarily disabled the feature for sharing conversations from its AI agent Muse. The move follows research showing that thousands of shared conversations could be found through public DNS data, even without a Meta account.
Cybersecurity firm Claroc says it found more than 6,800 web addresses that referred to shared Muse conversations. The researchers viewed several hundred pages; almost all the pages they opened were accessible without logging in.
According to Claroc, the content found included an internal revenue overview, a business loan application, a property report and employees’ holiday calendar. The researchers say they did not publish the names, links or other identifying details of the users involved.
According to Claroc, the problem did not involve a conventional break-in. Muse turned shared conversations into public web pages. A conversation’s title was also incorporated into the web address. As a result, specialist passive DNS services could collect the addresses and make them available to people who had never received the original link.
Claroc says it reported the issue to Meta on 8 October. According to Claroc, Meta confirmed that the sharing option had been suspended after Ars Technica asked questions. Meta said users could share specific Muse results via a link; the company is now investigating how such links should be better protected.
In a check on 20 October, 40 previously opened links could no longer be accessed, according to Claroc. The addresses themselves and the conversation titles remained present in historical DNS data, according to Claroc. This means that disabling the feature does not automatically remove all previously collected information from public systems.
The scale of the possible exposure has not been established. Claroc says it examined one discovery method and one period. The researchers say they found no evidence that anyone had misused the conversations. They do warn that financial data, internal company information and arrangements concerning confidential conversations could be attractive for fraud or targeted deception.
Muse was launched in September as a personal AI agent that can, among other things, fill in forms, make appointments, make purchases and produce documents. Such functions give the service access to users’ information and accounts. The issue therefore heightens attention on the question of when an AI assistant truly keeps something private and when a user is effectively publishing it.
Also show the region and a close-up
One story, several perspectives
What is established
- Meta has temporarily stopped the feature for sharing Muse content.
- Claroc found more than 6,800 sharing addresses through passive DNS data.
- Several hundred pages were accessible without an account.
- The total scale of the exposure and any misuse have not been established.
Left
Arguments AI services that work with personal and company data should be strictly regulated by default and designed with privacy in mind. Users should not be held solely responsible for technical choices they cannot fully understand.
Values Privacy, protection of citizens and employees, limits on the power of technology companies and public oversight.
Consequences Without stronger safeguards, particularly vulnerable users and employees could unintentionally disclose sensitive information. Transparency and oversight may slow innovation, but reduce social harm.
Centre
Arguments The feature should return only after an independent security audit, clear default settings and understandable warnings. Sharing via a link can be useful, but technically it should not go further than the user intends.
Values Proportionality, practicality, innovation with oversight and responsibility shared by both user and provider.
Consequences A targeted adjustment could preserve the benefits of AI agents without subjecting every use to heavy regulation. Unclear liability would nevertheless remain a problem.
Right
Arguments Anyone who deliberately shares a conversation must understand that a link is not a private vault. Companies must handle confidential data carefully themselves and should not expect new government rules for every risk.
Values Personal responsibility, freedom of choice, enterprise and restraint in government intervention.
Consequences Giving users and organisations more responsibility could enable rapid innovation. The drawback is that consumers and small businesses often lack the knowledge to assess such technical risks themselves.
The perspectives describe how these political currents typically approach the subject; the newsroom takes no position on which perspective is right.
Fact-check Approved · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The article’s central points are confirmed by Claroc’s research, Meta’s response and an independent second source. The text makes clear which findings are limited to one research method and that misuse has not been established.
- confirmed Meta has temporarily suspended Muse’s sharing feature. — India Today reportedly confirmed this; Claroc describes the same development. source
- confirmed Claroc found more than 6,800 web addresses referring to Muse sharing pages. — Mentioned in Claroc’s research report. source
- confirmed Several hundred pages were accessible without an account. — Claroc and India Today describe this check. source
- confirmed Researchers found, among other things, financial and internal company information. — Examples appear in Claroc’s report and India Today’s summary. source
- confirmed No evidence was found that anyone had misused the conversations. — Claroc says it found no indications of misuse. source
- confirmed Muse can perform tasks such as filling in forms, making appointments and making purchases. — These capabilities are described by Meta. source