Meta halts Muse sharing following discovery of AI conversations online.

Meta has temporarily halted a feature in Muse that allows users to share conversations with the AI assistant after researchers discovered that the URLs were publicly accessible online. A report from a security firm revealed that over 6,800 Muse links were identified through public DNS records.

According to a Muse representative, the ability to share specific Muse artifacts creates a page accessible to anyone with the link. However, this functionality is currently paused as the team reviews the findings and considers adjustments to how these links are generated and discovered.

The feature enables users to share their Muse conversations via a link, but the design of these links made them relatively easy to locate. The security firm noted that Muse constructs each shared link using the conversation’s title, a brief description, and a random ID. This structure often revealed the content of the page before it was even opened, as the hostname typically indicated what the link contained.

By examining public DNS records, which act as a directory for web traffic, the researchers were able to access numerous Muse conversations. These included sensitive information such as a marketing company’s revenue review, a small business owner’s loan application, a workplace’s full-year staff calendar, and notes for a job candidate’s call with an AI lab. This incident highlights ongoing concerns about AI sharing features inadvertently making private conversations more public, similar to previous instances with other AI platforms.