Meta pauses Muse chat sharing after private details were exposed

[Poppy28]

Meta has paused a sharing feature in its Muse AI platform after a security firm found it was exposing private information. Engadget's Anna Washenko reports that security company Claroc discovered the problem with Muse share links

Every share link used the same domain, with the chat's title placed in the subdomain. That made the links discoverable through passive DNS searches, which Claroc compared to a table of contents. Anyone looking could find a list of shared chats without being given the links

Claroc listed 6,800 shared chats and saw private personal and business material. That included meeting times with a frontier AI lab, a small business loan application, a bank fraud alert with partial account details, and internal company documents

Meta said it had paused the functionality while it reviewed the report. After the change, Claroc could no longer open its sample links. Ars Technica first reported the findings

This is a basic design mistake with serious consequences. People sharing a chat with one person do not expect it to become discoverable by anyone. AI assistants are getting more personal and more agentic, so privacy design needs to be much more careful

Do you share AI chats with others? And should AI companies treat chat sharing as sensitive by default?

Meta suspends Muse chats sharing feature after it left private details exposed - Engadgetwww.engadget.com