Meta Muse exposed personal and business secrets when users shared conversations
Meta Muse exposes users' personal and business secrets when they share conversations
Researchers at security company Claroc said they enumerated 6,800 conversation-sharing links created by Meta Muse users, and upon opening several hundred of them found information clearly not intended to be public, including personal and business secrets. Meta told Ars Technica in response that it is reviewing the feature and has paused sharing during the review. Muse is a general-purpose AI agent launched by Meta; its sharing feature generates a unique URL that lets anyone open a page hosting the content. The usual practice is to make the URL contain a long string of hard-to-guess characters, but a core design decision in how Muse constructs URLs makes these links easy to discover. Meta CEO Zuckerberg said last month that Muse was "built from the ground up for privacy and safety."
A security company enumerated 6,800 Muse sharing links and found sensitive content; Meta then paused the feature, showing how link construction determines whether shared content can be guessed.