Meta pauses Muse chat sharing after private chats turn up online

Meta has paused a feature for sharing Muse AI conversations after security researchers found that shared chats could be discovered and opened by strangers.

1 min read

The Verge

At a glance

Muse share links found in public DNS records
6,800+
What’s new
Meta says it has paused Muse’s share links while it reviews the report and considers changing how the links can be discovered.
Who it affects
Anyone who has shared a Muse conversation, and businesses whose staff put work details into AI chats.

Each shared chat got its own web address built from the conversation’s title plus a random ID. Security firm Claroc found those addresses in public DNS records, the internet’s directory of web addresses, which let it rebuild the links and open hundreds of chats. They included a marketing company’s revenue review, a small business owner’s loan application, a workplace’s staff calendar and notes for a job candidate’s call. Ars Technica reported the pause earlier.

Why it matters

Sharing features keep turning private AI chats into public pages: chats from ChatGPT, Claude and Grok have previously ended up in Google Search. As people use assistants for real work, a discoverable link becomes a data leak. Expect closer scrutiny of how AI apps design sharing, and treat any shared chat link as public.

Meta pauses Muse sharing after researchers find AI chats on the web

The Verge

theverge.com

Summary by Second Order AI. Full reporting is at the original source.