Meta Pauses Muse AI Sharing After Researchers Expose Chat Links

Meta has temporarily disabled the link‑sharing feature of its Muse AI assistant after a security firm discovered that thousands of conversation URLs were publicly discoverable.

Claroc researchers scanned public DNS records and reconstructed more than 6,800 Muse links, revealing sensitive data such as a marketing firm’s revenue figures, a loan application, a full‑year staff calendar, and interview notes from an AI lab.

The sharing mechanism builds each URL from the conversation title and a short random identifier, making the hostname a reliable clue to the content. Because DNS entries are openly queryable, anyone could enumerate the links without authentication.

Why it matters for AI infrastructure

For GPU cloud providers and enterprises running large‑scale model inference, the incident underscores the need for strict access controls on any artifact‑sharing endpoint. Leaked prompts or context can expose proprietary data, bias model outputs, and violate compliance regimes—especially when workloads run on shared accelerator clusters.