Meta pauses Muse content-sharing feature after discovering vulnerability that leaked sensitive information

Meta's AI agent Muse had a security vulnerability: more than 6,800 pages shared via links could be viewed without logging in, and the company paused the related feature, fixed the vulnerability, and then restored service. Security researchers found the URLs of these pages by querying DNS history; the issue was related to how links were generated and recorded, and involved only some content shared via Muse links, not all users' private conversations being exposed. Among the located pages were potentially sensitive documents such as loan applications, work calendars, corporate revenue reviews, and confidential meeting notes; the researchers said there was no evidence that anyone had maliciously exploited the information. Meta said content shared before the fix has been given new URLs, and accessing old links prompts users to ask the sharer for the updated link.