Meta suspends Muse link sharing after shared chats found online
Claroc located more than 6,800 shared Muse conversation URLs via domain lookup records, and some opened without a login.
Meta has temporarily suspended the conversation-sharing feature of its AI assistant Muse after a security company found that links to shared conversations could be located through domain lookup records, according to The Verge.
Claroc said it found more than 6,800 shared Muse conversation URLs by analysing domain lookup records. Muse generated share links from a short phrase describing the conversation plus a random identifier, and the links could be opened without logging in.
Researchers opened hundreds of the shared conversations. Among them were corporate revenue review materials, a small business loan application, staff annual leave schedules and a job applicant's notes about a private meeting with an AI lab.
Meta Muse spokesperson Tracy Clayton said the feature was suspended while the report is reviewed and ways to improve how links can be found are discussed. Claroc reported the issue to Meta on the 8th and said 40 shared pages it rechecked on the 20th no longer opened.
No evidence has been confirmed that outside attackers exploited the links. Shared conversations on ChatGPT, Claude and Grok have previously been exposed through search engines.
Quick answers
Why did Meta suspend Muse's sharing feature?
Claroc found that links to shared Muse conversations could be discovered through domain lookup records and opened without logging in. Meta suspended the feature while it reviews the report.
Were the shared Muse links exploited by attackers?
No evidence has been confirmed that outside attackers exploited the links.