Meta Pauses Muse AI Chat Sharing After Researchers Find Over 6,800 Links in DNS Records

Meta paused the conversation-sharing feature on its fast-growing Muse AI assistant after researchers at security firm Claroc discovered more than 6,800 shared Muse links exposed through public DNS records, according to The Verge and Ars Technica. By querying public DNS directories, Claroc researchers were able to view hundreds of shared Muse conversations, including a marketing company's revenue review, a small business owner's loan application, a workplace's full-year staff calendar, and notes for a job candidate's call with an AI lab. Claroc noted that Muse constructed each shared web address using a short descriptive title and a random ID inside the hostname itself, allowing anyone pulling the hostname from public DNS records to rebuild the full link and anticipate its contents before opening it. The exposure follows similar incidents where shared conversations from OpenAI's ChatGPT, Anthropic's Claude, and xAI's Grok were indexed on Google Search. "People have the ability to share specific Muse artifacts, which creates a page that can be accessed by those with the link. However, we’ve paused this functionality while we review this report and consider changes to how these links can be discovered." — Tracy Clayton, Muse Spokesperson.