Meta Pauses Muse Chat Sharing After Researchers Find Exposed Conversations
Meta has disabled Muse conversation sharing while it reviews a report that shared-chat links could be discovered through a single search.
Meta has paused the chat-sharing feature in Muse, its agentic AI platform, after security researchers found that shared conversation links could be discovered through public DNS records. According to Engadget, researchers at security firm Claroc identified 6,800 links and viewed personal and business information in some of the chats.
Table of Contents
How the links were found
Muse users could share a conversation by creating a URL. Claroc found that the URLs used the same domain and placed each conversation’s title in its subdomain, Engadget reported. Those addresses appeared in passive DNS records, which track how domain names resolve to IP addresses. That made it possible to search for shared links and see conversation titles without receiving a link directly from a user.
Ars Technica described the discovery as requiring a single query to find thousands of conversations listed by title. Engadget reported that Claroc enumerated 6,800 shared-chat links. The reports do not say that researchers opened every link they found, or that chats without a share link were accessible this way.
What researchers saw
According to Engadget, the information Claroc viewed came from both personal and business uses of Muse. Examples included meeting times involving a frontier AI lab, a small-business loan application, a bank fraud alert containing partial account details, a company vacation calendar and other internal company documents. The problem was not simply that users had chosen to make share links: the links could also be found by someone searching DNS records.
Engadget said Meta told Ars Technica it had paused the feature while reviewing the report and considering changes to how the links can be discovered. Claroc subsequently found that it could no longer open a sample of links its researchers had accessed earlier, according to Engadget. The reports do not establish whether the pause permanently addresses the discovery method or what changes Meta may make before sharing returns.
Why it matters for workplace use
The examples reported by Engadget include internal company material as well as personal financial information. For people using AI tools at work, the case illustrates a distinction between choosing to share one conversation and making its link easy for others to find. The available reports do not identify affected employers or say whether anyone beyond the researchers accessed the chats, so the extent of any further exposure remains unclear.
Sources
This story was compiled by AI from the reports below. Read the originals for the full details.