Meta AI agent Muse can expose sensitive personal and business information when users share conversations through web links, according to Ars Technica. Security researchers discovered that links generated for sharing chats are easy to discover, revealing confidential data including executive notes and revenue reviews.
Key takeaways
- Muse allows users to share conversations with other people through unique URLs.
- Researchers from security firm Claroc enumerated 6,800 links created by Muse users.
- The shared links exposed confidential executive notes, revenue reviews, and loan applications.
- Including conversation names in the URLs made public discovery possible via passive DNS searches.
How does Meta Muse expose user data?
Muse is a general-purpose AI agent from Meta that lets users share searches, conversations, and images with others. Like many services, it generates unique URLs so recipients can load shared content. While CEO Mark Zuckerberg stated last month that the tool was built for privacy and security, a specific design decision made the links easy to find.
Claroc researchers found that they could enumerate 6,800 links created for sharing conversations. Opening a few hundred revealed private materials such as a candidate notes for a confidential executive-search call, an internal revenue review marked for a CEO, a loan application, and a bank fraud alert.
How researchers discovered the share links
The easiest way to uncover the URLs is through passive DNS searches using commercial services. Passive DNS records store historical resolution of domain names to IP addresses over time. When an intended party clicks a share link, the DNS information gets recorded in a searchable database.
Claroc found these links because all of them use the domain name cf.metaaiusercontent.com. The discovery became even simpler because Meta added the conversation name directly into the URL alongside a long string of text. The researchers noted that gathering these links took just one query.
What it means for users
Anyone who relies on Meta Muse to share information with others needs to know about this vulnerability. People sharing sensitive personal matters, financial details, or workplace documents risk exposing those secrets publicly. The findings show that including descriptive titles in share URLs can compromise user privacy even when strings are appended to the address.
Frequently asked questions
Meta Muse is a new general-purpose AI agent from Meta that allows users to share searches, conversations, images, and similar content with other people.
Researchers from security firm Claroc discovered that Meta Muse share links could expose sensitive information.
The researchers were able to enumerate 6,800 links that Muse users created for sharing conversations with others.
The exposed data included executive-search call notes, an internal revenue review, a loan application, a bank fraud alert, an internal performance report, and a staff vacation calendar.
The links were easy to discover through passive DNS searches because they all use a single domain name and include the conversation title directly in the URL.
Based on reporting by Ars Technica. Read the original article
