Meta restores Muse sharing after exposed links raised privacy fears

Meta has turned Muse sharing back on after researchers showed that pages people shared from its AI agent could be found by strangers.

1 min read

The Verge

At a glance

What’s new
Meta says the flaw is fixed and that Muse artifacts, such as documents and images, shared before the fix now have new web addresses.
Who it affects
People who shared documents or images from Muse, and anyone they sent those links to.

Researchers at Claroc reported that the web addresses for shared Muse pages were based on each conversation’s title and recorded in public DNS, the internet’s address directory. That made them easy to find. The researchers said they turned up pages such as a marketing firm’s internal revenue review and a small business owner’s loan application. Meta paused sharing after Ars Technica asked about the problem. Meta’s David Singleton said on X that the issue affected shared artifacts rather than chat sharing, and that visitors to old links will see a note asking them to request the new one.

Why it matters

AI agents produce documents people treat as private, yet sharing features often rely on public links. This case shows how a naming choice, not a break-in, can expose sensitive files. Meta’s fix breaks old links, which protects data but leaves users to reshare. Expect closer scrutiny of how agent apps handle sharing as they move into work and personal finance.

Meta turns Muse sharing back on

The Verge

theverge.com

Summary by Second Order AI. Full reporting is at the original source.