Meta suspends a feature in its Muse AI assistant that lets users share conversations after security researchers report that the shared links were discoverable on the public web. Coverage across outlets says the issue involved URLs associated with shared chats becoming accessible through public-facing infrastructure.
The Verge and Engadget report that researchers were able to access thousands of shared conversations—citing 6,800 shared items—after identifying publicly available Muse links. The Verge adds that Meta said it paused the sharing feature once it learned that the URLs were accessible online, as reported by Ars Technica.
Slashdot provides more technical context, describing how researchers used public DNS records to enumerate share links and then found that some shared content appeared to include sensitive personal and business information. It says the conversation titles were incorporated into DNS-visible subdomains, making discovery easier than typical share links that rely on hard-to-guess identifiers. Slashdot also notes Meta suspended sharing while it considers changes.
