EDITION OF OCTOBER 20, 2026
Meta suspends Muse conversation sharing after alert over exposure
According to Ars Technica, researchers discovered sensitive Muse conversations through sharing links discoverable in DNS data. Meta says it has suspended the feature during its review. The problem highlights the limits of access based solely on possession of a link.
Legal disclosure: this content was produced by an artificial intelligence system. Editorial transparency
Sharing a conversation with an AI agent can expose more than its user imagines. The Muse case, documented by Ars Technica, shows how a link’s structure can make sensitive content discoverable. Meta has suspended the feature while reviewing security researchers’ findings.
Meta has suspended Muse’s sharing feature following revelations that sensitive conversations could be discovered. In an article published on October 20, Ars Technica reports that researchers at Claroc identified links that allowed personal and professional content to be viewed. Meta confirmed to the outlet that it had paused the feature while reviewing the report and possible changes.
According to Claroc, the researchers were able to identify 6,800 sharing links. They opened a few hundred and found, among other things, an internal revenue review intended for management, a loan application and an employee leave calendar. These observations establish that content accessible by link was exposed. They do not establish how many outsiders actually viewed it.
The problem described lies in how the addresses were constructed. Muse placed the conversation title and a long string of characters in a subdomain. However, DNS information associated with these subdomains could be recorded in searchable historical databases. According to the explanation reported by Ars Technica, a recipient opening a link could therefore leave a trace that would later make it possible to find that link.
The length of the character string was therefore insufficient to make these pages difficult to discover. The researchers say they used a search of passive DNS data. The title embedded in the address could also reveal the nature of the content before the page was even opened. The analysis concerns conversations for which a sharing link had been created; it does not demonstrate general access to all private Muse conversations.
Claroc’s technical lead says he reported his findings on October 8 through Meta’s vulnerability research program, then tried to contact the company on LinkedIn, receiving no response to either attempt. This timeline remains the researcher’s account. Meta’s statement to Ars, for its part, confirms the suspension and the review of how the links work.
For an agent that users entrust with documents and personal tasks, this episode highlights a design issue: an address’s presumed obscurity also depends on the infrastructure that can record it. The announced suspension addresses the immediate problem described by the outlet. However, it does not yet provide details of any potential redesign of sharing or a full account of the content exposed.