A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse

Summary

Security researchers at Claroc found that share links created by Meta's Muse AI agent can be discovered through passive DNS searches because every link uses the cf.metaaiusercontent.com domain and includes the conversation name. They enumerated 6,800 shared links, and a few hundred of those opened to reveal private material, including financial, business and personal details. Meta said it has suspended the sharing feature while it reviews the report and considers changes.

Mitigation

Meta said it has paused the sharing functionality while it reviews the report and considers changes to how these links can be discovered.

Related items

• InfoNew prize launches for books co-written with AISame vendor · The Guardian Technology
• MediumLiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI CredentialsSame vendor · Socket Blog
• LowMeta pauses Muse sharing after researchers find AI chats on the webSame vendor · The Verge (AI)
• InfoMaking the internet better for AI agents might make it worse for everyone elseSame vendor · MIT Technology Review
• InfoWhy Britain should reject the lure of cheap – and scary – Chinese AISame vendor · The Guardian Technology