Meta pauses Muse sharing after researchers find chats on the web

Meta has paused a Muse feature that lets people share conversations with its AI assistant after researchers found that the links could be discovered on the web.

Researchers at security firm Claroc said they found more than 6,800 Muse links through public DNS records. In a report published this week, Claroc said it used those records to access hundreds of conversations.

The conversations included a marketing company’s revenue review, a small business owner’s loan application, a workplace’s full-year staff calendar and notes from a job candidate’s call with an AI lab, according to Claroc.

Muse sharing creates a page that anyone with the link can access. Meta spokesperson Tracy Clayton told The Verge that the company paused the feature while it reviews Claroc’s report and considers changes to how the links can be discovered.

Claroc said Muse’s web addresses combine a share’s title, a short description of the conversation and a random ID. It said the hostname often revealed what a page contained, and public DNS records could be used to reconstruct the links.

Ars Technica also reported on the findings. Similar issues have affected sharing features for OpenAI’s ChatGPT, Anthropic’s Claude and xAI’s Grok, with conversations from those services appearing in Google Search.