Meta restored sharing in its Muse AI agent on 22 October and replaced links to previously shared content, The Verge reported. The feature is back after a two-day pause over links that security researchers could find through public DNS records, but people who shared pages before the fix must now give recipients new URLs.
Key points
- Meta re-enabled Muse sharing on 22 October, two days after pausing it.
- Claroc researchers said they found 6,800 share links through public DNS records.
- Meta says the problem affected links to shared artifacts such as documents and images, rather than chat sharing.
- Old artifact links now direct visitors to request a new link from the person who shared the page.
Claroc traced 6,800 Muse links
Researchers at security firm Claroc said they identified 6,800 links created by Muse users to share conversations, Ars Technica reported. They opened a few hundred of the pages and encountered material that appeared sensitive. The count refers to discoverable links, not to 6,800 sensitive documents.
The route to those pages ran through passive DNS, databases that record observed lookups of website names. Muse put a conversation title and an identifier in each share link’s subdomain under cf.metaaiusercontent.com. When someone opened a link, that hostname could enter a searchable DNS record, giving researchers a way to recover the address without receiving it from the person who shared the page.
That design matters for Muse, a general-purpose agent that can fill out forms, book appointments and create documents using access to a user’s accounts. A person could choose to share a page with someone else, yet its address could also be found through DNS records. Claroc called the discoverable pages GhostShares.
Shared Muse pages held business records
Among the pages Claroc inspected were an internal revenue review marked for the chief executive of a marketing company and a small-business owner’s loan application. The researchers also found a candidate’s preparation notes for a confidential executive-search call with a frontier AI lab, including an internal contact and a meeting time.
Claroc co-founder and CTO Asaf Aprozper said he reported the findings through Meta’s bug bounty programme on 8 October. Meta paused sharing on 20 October while it reviewed the findings and considered changes to how the links could be discovered, Ars Technica reported. AI Affairs reported the pause after the researchers found shared Muse pages through DNS records.
Meta gives shared artifacts new URLs
Meta’s David Singleton announced the restoration in a post on X on 22 October. “The underlying issue is now fixed, and sharing is back on,” he said, according to The Verge. Singleton said the issue concerned URLs for shared Muse artifacts — content such as documents and images — and was not a flaw in chat sharing.
That distinction narrows Meta’s description of the fix. Earlier accounts of the exposure had described discoverable links to shared conversations, while Singleton identified the affected URLs as artifact links. For users who shared an artifact before the change, Singleton said its URL has been replaced. Visitors following the old address now see a note asking them to get the new link from the person who shared it.
.jpg){kind=link}