Meta Pauses Muse Sharing After Security Firm Reports DNS Flaw Exposed Chats
Meta disabled the chat-sharing function of its Muse AI assistant after security firm Claroc reported that passive DNS records could reveal confidential conversations through predictable link structures.
US tech company Meta has temporarily suspended the conversation-sharing feature of its AI assistant, Muse. The decision follows a report by security firm Claroc, which identified a design flaw in how Muse generated shareable links. Originally designed to allow anyone with the link to view the content, the system embedded conversation titles directly into the URL's subdomain. Researchers demonstrated that these hostnames could be harvested from public passive DNS history, allowing third parties to reconstruct valid links to private chats.
Claroc stated that they recovered approximately 6,800 shared links through a single query and accessed hundreds of pages. While not all contained sensitive information, many exposed personal and business secrets, including internal revenue reviews, loan applications, and confidential notes prepared for calls with AI lab executives. The firm termed these externally discoverable pages 'GhostShares'.
Meta confirmed the pause and stated it is reviewing the report to adjust link discoverability. The company emphasized that only user-initiated shares were affected, not all private Muse conversations. Claroc noted that while the pages are now inaccessible, some hostnames may remain in passive DNS records, indicating the privacy risk may not be fully eliminated.