Meta Muse exposes users' personal and business secrets when they share conversations
The gist
Meta paused Muse's chat-sharing feature after security firm Claroc found about 6,800 shared conversation links via one DNS query.
The links exposed shared chats to anyone searching, raising privacy concerns for users and businesses.
How it unfolded
- Sep 8, 2026Meta launched Muse, its personal AI agent.
- Oct 8, 2026Claroc reported the issue to Meta's bug bounty program, saying it did not log in or bypass any controls.
- Oct 18, 2026Claroc published research saying one passive-DNS query surfaced roughly 6,800 Muse share links, and it opened a few hundred.