Meta Suspends Muse AI Chat Sharing Following Claroc Discovery

Meta announced that it has temporarily suspended the sharing feature for its Muse AI assistant after security firm Claroc discovered more than 6,800 accessible chat links through public DNS records.

Meta has suspended the feature that allows users to share conversations they have with its Muse AI assistant with others, after it was discovered that these URLs were exposed on the internet. In a report published by security firm Claroc, it was stated that more than 6,800 Muse links were accessed by scanning public DNS records.

Muse spokesperson Tracy Clayton stated in an email to The Verge that users could share certain Muse data and that this created a page accessible to anyone with the link, adding that they have paused this functionality while they review the report and evaluate changes to how the links are discovered.

Claroc argued that Meta's link designs made them easy to find, noting that the addresses were formed by a combination of the chat title, a short phrase, and a random ID. The researchers reported that they were able to access hundreds of chat contents through DNS records, such as a marketing company's revenue review, a small business owner's loan application, and notes concerning a job candidate.