Meta halted the conversation-sharing tool in Muse AI after security specialists discovered that public DNS records exposed thousands of shared chat links. Claroc security specialists uncovered the problem over the weekend. Ars Technica broke the story, and Meta verified to Benzinga that it stopped the tool temporarily while looking into the report.

Researchers Found Around 6,800 Shared Chats

Claroc reported that Muse generated shared conversation URLs using a predictable format containing the title of every chat. Those web addresses also appeared in public domain name system records. Consequently, specialists used passive DNS searches, which review archived DNS activity, to locate shared conversations. Claroc stated that one such search yielded thousands of links and pinpointed about 6,800 shared Muse chats. Specialists opened some of those chats and uncovered private data, such as meeting plans for a major AI lab, a small-business loan application, a bank fraud alert with partial account details, a company vacation calendar, and internal business papers.

Meta Suspends Muse Sharing

Meta explained that the Muse bug bounty program exists so security specialists can find problems and improve the product. The corporation mentioned that when individuals shared a Muse conversation, the tool created a webpage accessible to anyone with the link. Still, Meta stated it halted the sharing feature while evaluating Claroc findings and exploring changes to link discoverability. After the update from Meta, Claroc reported that specialists could no longer open a sample of the earlier links. "We are glad to see it closed this quickly," Claroc stated.

Muse Has Faced Previous Privacy Concerns

This event follows another privacy dispute involving Muse. In September, Inc. tech columnist Jason Aten claimed that Muse accessed private messages on his Mac even though he did not turn on the system Full Disk Access permission. Meta spokesperson Andy Stone denied the allegation at the time, stating that Muse accesses Apple Messages only when individuals explicitly choose to opt in.

Meta Is Betting on Muse as a Major AI Product

The problem arises just before Meta plans to release its third-quarter financial results after the market closes on Wednesday. Analysts predict revenue of $63.36 billion, rising from $51.24 billion the previous year. Meta has exceeded revenue forecasts for over 10 straight quarters. Tech analyst Dan Ives anticipates that Meta will monetize its roughly 3.5 billion-user base via the Muse AI agent, including across Facebook and Instagram. Truist, per market strategist Shay Boloor, projects that Muse could bring in around $29 billion in revenue by 2030, with roughly $11 billion coming from subscriptions. Meta shares finished Tuesday at $694.25, falling 1.59%, before climbing 0.11% to $695 in after-hours trading.