Meta has paused its Muse conversation-sharing feature after researchers accessed private chat links, first reported by Engadget. The issue exposed private information from personal and business uses of Muse; passive DNS searches surfaced the shared URLs with a common domain and conversation-title subdomains, making them searchable by name in public DNS.
Meta debuted Muse, its agentic AI platform, last month. The sharing option let users create a URL for a conversation, and Claroc found that every link used the same domain while the conversation title appeared in its subdomain.
Passive DNS records show how human-readable domain names resolve to IP addresses, functioning as a kind of phone book for the internet. Claroc said the public DNS entries let one search return thousands of links, listed by conversation name.
Claroc’s researchers enumerated 6,800 links and could view private information from both personal and business uses of Muse. Examples included meeting times with a frontier AI lab, a small-business loan application, a bank fraud alert with partial account details, a company’s vacation calendar and other internal company documents.
Individual conversations produced separate share URLs, but a passive-DNS search returned thousands of them together.
Meta said it paused the feature while reviewing the report and considering changes to how the links could be discovered. Claroc said its researchers could no longer open a sample of links they had accessed before Meta’s update.