Researchers at Claroc reported that the web addresses for shared Muse pages were based on each conversation’s title and recorded in public DNS, the internet’s address directory. That made them easy to find. The researchers said they turned up pages such as a marketing firm’s internal revenue review and a small business owner’s loan application. Meta paused sharing after Ars Technica asked about the problem. Meta’s David Singleton said on X that the issue affected shared artifacts rather than chat sharing, and that visitors to old links will see a note asking them to request the new one.
Why it matters
AI agents produce documents people treat as private, yet sharing features often rely on public links. This case shows how a naming choice, not a break-in, can expose sensitive files. Meta’s fix breaks old links, which protects data but leaves users to reshare. Expect closer scrutiny of how agent apps handle sharing as they move into work and personal finance.
Original source
Meta turns Muse sharing back on
The Verge
theverge.com
Summary by Second Order AI. Full reporting is at the original source.