{"data":{"id":"f689e40f-ec41-41e2-9ce8-72f3b4480754","title":"A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse","summary":"Security researchers at Claroc found that share links created by Meta's Muse AI agent can be discovered through passive DNS searches because every link uses the cf.metaaiusercontent.com domain and includes the conversation name. They enumerated 6,800 shared links, and a few hundred of those opened to reveal private material, including financial, business and personal details. Meta said it has suspended the sharing feature while it reviews the report and considers changes.","solution":"Meta said it has paused the sharing functionality while it reviews the report and considers changes to how these links can be discovered.","labels":["security","privacy"],"sourceUrl":"https://www.wired.com/story/a-design-flaw-in-share-links-exposes-users-personal-conversations-with-meta-muse/","publishedAt":"2026-10-21T12:35:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["pii_leakage"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Meta"],"affectedVendorsRaw":["Muse","Meta AI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-21T12:35:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}