MENLO PARK, CALIFORNIA / RankWire.AI / – Meta has paused the conversation-sharing feature in its Muse AI assistant after security researchers showed that thousands of shared chat links were discoverable through public internet records. The exposure could have revealed sensitive personal and business details. Meta said on Tuesday, October 20, that it had paused the function while it reviews the report. It is weighing changes to how shared links can be found.
The findings came from security firm Claroc, which located more than 6,800 Muse share links in passive DNS records. Such records store Domain Name System lookups and can make website addresses discoverable to anyone searching the data. Claroc said it notified Meta through its bug bounty program on October 8 and published its research on October 18. The 6,800 figure counts discovered addresses, not sensitive conversations.
Claroc’s researchers viewed a few hundred of the conversations, and nearly all live shares opened without a login. Among them were a small-business owner’s loan application with part of an account number and a note about a bank fraud alert. Others included a marketing firm’s revenue review prepared for its chief executive and a real-estate investor’s report on mortgages and returns. Confidential interview preparation notes were also visible.
Hostnames revealed chat titles
The problem lay in the design of Muse’s sharing addresses. Each address placed the conversation title and a random identifier in the hostname. Although the identifier could not easily be guessed, visiting a link caused a DNS lookup that passive DNS services could log. People who never received a link could then find it in those databases. The shared conversation would open without any sign-in.
Muse’s settings asked search and AI crawlers to skip its share pages, but researchers did not need a search engine to find them. More than 75 saved scans of Muse share pages were stored on urlscan.io. Claroc reported no evidence that anyone misused the data. It did not contact affected users and said it could not tell whether others had discovered the links. Meta’s statement did not address whether users would be told.
Feature paused as Meta reviews report
When Claroc rechecked 40 previously open shares on October 20, none loaded and their addresses returned errors. The conversation titles still appear in passive DNS history. Muse launched in the United States on September 8 for adults aged 18 and over. It can link to users’ email, calendar, payment and health apps. Meta earlier introduced its Muse Spark model, developed by its superintelligence lab, in April.
The case adds to concerns about privacy in AI tools and the risks of sharing chats that hold confidential information. In 2025, shared ChatGPT conversations surfaced in Google search results, prompting OpenAI to remove the option that made them indexable. Meta was also ordered to fund teen mental health programs in New Mexico in August. Meta has not said when Muse sharing will resume or how links will change.