Meta Muse Security Flaw Exposed 6,800 Private Conversations Through DNS Leak
13 Sources
[1]
Meta Muse exposes users' personal and business secrets when they share conversations
A single query is all that's required to find thousands of conversations listed by title. Muse, the new general-purpose AI agent from Meta, can expose sensitive information when users share conversations through Web links, researchers reported Monday. Like many online services, Muse allows users
[2]
A Design Flaw in Share Links Exposes Users' Personal Conversations With Meta's Muse
The company is suspending the feature after security researchers discovered how easy it was to access sensitive information shared with the AI assistant. Muse, the new general-purpose AI agent from Meta, can expose sensitive information when users share conversations through web links, researchers
[3]
Meta suspends Muse chats sharing feature after it left private details exposed - Engadget
Researchers accessed 6,800 shared conversations with the AI agent. Meta debuted its Muse agentic AI platform last month and bug hunters have already uncovered a privacy problem. Users would share their Muse conversations by creating a URL, but that feature has been disabled after researchers found
[4]
Meta suspends Muse sharing after sensitive documents turn up in shared chats
Serving tech enthusiasts for over 25 years. TechSpot means tech analysis and advice you can trust. What we know so far: Meta has paused the conversation-sharing feature in its Muse AI assistant after security researchers discovered thousands of links in public DNS records. Some of the links
[5]
Meta turns Muse sharing back on after a DNS leak exposed private pages
Security firm Claroc found more than 6,800 pages made through Muse sharing with a single DNS search. Some held a loan application, a staff holiday calendar and notes for a confidential call with an AI lab. Meta has switched Muse sharing back on. It paused the feature on Tuesday. That came after
[6]
Meta's Muse AI Agent Caught Leaking Users' Intimate Personal Information
"We would have guessed that gathering these would take real effort. It took one query." As Meta was scrambling to release its Muse AI agent to the public earlier last month, CEO Mark Zuckerberg took to social media to insist that it was "built from the ground up for privacy and security." On
[7]
Meta Muse AI agent shared conversation links found via public DNS
Security firm Claroc said some of the pages held loan applications, revenue reviews and a bank fraud alert Security firm Claroc said in a blog post that its researchers located more than 6,800 links to conversations shared through Meta $META's Muse AI agent, using one search of public DNS
[8]
Meta pauses Muse sharing after 6,800 links exposed
Security firm Claroc found that Muse's shared conversation URLs could be discovered through passive DNS searches because each link used the conversation title as a subdomain. Meta suspended chat sharing on its Muse AI platform after security researchers found 6,800 shared conversation links that
[9]
Meta Pauses Muse AI Sharing After Researchers Say 6,800 Chats Were Exposed 'Like a Table Of Contents' - M
On Tuesday, Meta Platforms, Inc. (NASDAQ:META) said it has suspended the Muse AI conversation-sharing feature after security researchers found that public domain name system (DNS) records could expose thousands of shared chat links. Researchers Uncover 6,800 Muse AI Chat Links Over the weekend,
[10]
Meta Muse closes dangerous privacy loophole after researchers exploit it
Meta's Muse AI agent has undoubtedly been the social media company's biggest product win in years. Released on Sept. 8, downloads for the AI assistant surpassed 5 million in just 22 days. By Oct. 20, it had more than doubled that amount to over 10.9 million downloads, according data from market
[11]
Meta pauses Muse AI chat sharing over 6,800 discoverable links
The sharing feature in Meta's Muse, its personal AI agent, has been paused after researchers at security firm Claroc found that conversations shared by link could be found even by people who had not been given the link. Claroc shared its detailed research on October 18. Meta then informed Ars
[12]
Meta's Muse AI leaves users vulnerable to identity theft through simple security flaw -- with over 6,800 links exposed: report
It's an AI agent of chaos. Meta's allegedly ironclad AI assistant Muse sparked privacy concerns after it was caught exposing users' sensitive and business information. Ahead of the Muse's release last month, Meta CEO Mark Zuckerberg had stressed the "privacy and security" of the cyber secretary,
[13]
Meta pauses Muse AI feature after researchers uncover exposed business secrets
No misuse found, and rechecked links no longer open, though DNS records retain some titles. Meta has paused a conversation sharing feature in its Muse AI assistant after researchers discovered a privacy flaw that may have exposed confidential business information. The issue affected conversations
Share
Copy Link
Meta suspended its Muse AI assistant's sharing feature after security researchers discovered a design flaw in share links that exposed sensitive user data. Claroc researchers found over 6,800 shared conversations containing confidential documents, loan applications, and business secrets through a single passive DNS search.
Meta Suspends Muse Sharing After Major Data Exposure
Meta Muse, the company's newly launched AI assistant, faced a critical security flaw that exposed thousands of private user conversations. Security researchers at Claroc discovered they could access 6,800 shared conversations through a single passive DNS search, revealing sensitive information that users clearly never intended to share publicly
1
2
. Meta responded by suspending the sharing feature while reviewing the issue and considering changes to prevent such privacy vulnerabilities2
.The exposed data included a small-business owner's loan application with requested amounts, a national marketing company's internal revenue review marked for its CEO, confidential executive-search call notes naming a frontier AI lab's internal contact and meeting time, a real-estate investor's performance report with property addresses and exact mortgage figures, and a workplace's full-year staff vacation calendar listing dozens of employees
1
3
. Researchers also found a to-do list containing a bank fraud alert with partial account numbers and transaction details2
.How the Design Flaw in Share Links Enabled Discovery
The privacy vulnerability stemmed from a fundamental design flaw in how Meta Muse constructed shareable URLs. Like many online services, the Muse AI assistant allowed users to create unique links for sharing conversations, typically protected by long random strings that prevent easy guessing
1
. However, Meta Muse placed conversation titles directly in the URL subdomain alongside random identifiers, making them visible in passive DNS searches2
.All shared conversations used the domain cf.metaaiusercontent.com with URLs structured like home-sale-budget-9f21c8a3.cf.metaaiusercontent.com or q3-revenue-review-7b1e42f0.cf.metaaiusercontent.com
1
. When someone clicked a share link, passive DNS systems recorded the entire hostname, including the conversation title and random identifier4
. Claroc researchers dubbed these discoverable pages "GhostShares" because they opened for people who were never handed the link1
.Understanding Passive DNS Searches and URL Structure Weaknesses
Passive DNS searches proved instrumental in uncovering the sensitive information exposed through Meta Muse. These commercial services store historical resolution of domain names to IP addresses, collecting DNS responses from sensors at recursive DNS resolvers
1
. A passive DNS record gets created when monitoring systems observe DNS responses, essentially creating searchable databases of every domain lookup2
.Claroc queried a commercial passive DNS dataset for Muse's content domain and identified over 6,800 share hostnames after filtering scanning activity
4
. The URL structure weakness meant conversation titles revealed subject matter before researchers even opened pages4
. Researchers needed only ordinary browsers to view content, with conversations loading through JavaScript even in logged-out incognito sessions4
.Related Stories
Meta's Response and Bug Bounty Program Reporting
Asaf Aprozper, Claroc's co-founder and CTO, reported the findings through Meta's bug bounty program on October 8 and attempted to reach Meta staff on LinkedIn without receiving replies
2
5
. Meta issued a statement saying "we've paused this functionality while we review this report and consider changes to how these links can be discovered"2
3
.David Singleton, who works on Muse at Meta, announced the fix on Thursday, stating Meta disabled sharing immediately after publication
5
. Artifacts shared before the fix received new web addresses, with old links displaying notes asking users to obtain updated ones5
. Singleton thanked researchers and noted Muse's bug bounty program pays up to $300,000 for valid findings5
. When Claroc retested 40 shares on October 20, none remained accessible, though conversation titles persist in passive DNS history4
5
.AI Trustworthiness Questions and Previous Zero-Day Vulnerability
This data exposure raises serious questions about AI trustworthiness for Meta Muse, which CEO Mark Zuckerberg claimed was "built from the ground up for privacy and security"
1
2
. The assistant autonomously fills out forms, books appointments, makes purchases, and creates documents, requiring access to most user accounts1
2
.Three weeks after launch, macOS security expert Patrick Wardle discovered a zero-day vulnerability allowing any app on the same device to gain complete control of user Muse accounts
1
. Meta downplayed severity, claiming exploitation required compromised devices, without acknowledging that simple ClickFix attacks could hijack accounts1
. On Wednesday's third-quarter earnings call, Zuckerberg said more than 10 million people had set up Muse, citing email and calendar connections as evidence users trusted its security setup5
. The combination of this DNS leak with the earlier zero-day vulnerability challenges whether user data protection measures justify the extraordinary access Muse requires.References
Summarized by
Navi
[1]
[3]
Related Stories
Meta Muse AI Agent Launches With Critical Security Vulnerability Allowing Account Takeover
22 Sept 2026•Technology
Meta Muse AI Agent Surges to 6.6M Downloads Despite Privacy and Security Controversies
06 Oct 2026•Technology
Meta Muse AI Agent Sparks Privacy Debate After Alleged Unauthorized Message Access
23 Sept 2026•Technology
Recent Highlights
Recent Highlights
Today's Top Stories
Don’t drown in AI news. We cut through the noise - filtering, ranking and summarizing the most important AI news, breakthroughs and research daily. Follow topics that matter to you and stay ahead.
