Home/Events/Meta Muse Exposes Sensitive Information Through Public Share Links

Meta Muse Exposes Sensitive Information Through Public Share Links

Confirmed
Confidence
90%
Impact: 80%
Updated 11m ago

Consensus Brief

Researchers from Claroc reported that Meta's Muse AI agent can inadvertently expose sensitive user information through easily discoverable public share links. The design of these URLs, which include conversation titles, allows for passive DNS searches to enumerate and access private conversations.

Sourced from
Primary: Ars Technica

What Changed Since Last Update

11m ago

New corroborating source added: Ars Technica published an update on Tue, 20 Oc ("Meta Muse exposes users' personal and business secrets when they share conversations").

Claim Ledger

4 claims tracked across sources

Independent Finding

Muse users created 6,800 links for sharing conversations.

Independent Finding

Researchers found sensitive information including loan applications and internal performance reports.

Confirmed Fact

A zero-day vulnerability was discovered that allowed other apps to gain control of the Muse account.

Official Claim

Meta downplayed the severity of the vulnerability.

Role-Based Impact Analysis

Source Timeline

30 sources corroborating