Meta Pauses Muse Chat Sharing After 6,800+ Links Found Discoverable via Public DNS

What happened

Claroc published its research on Oct 18: Muse generated a webpage for each shared conversation that anyone with the link could open, no Meta account required; the URL embedded the conversation title in the subdomain (under cf.metaaiusercontent.com), and the full hostname was recorded by passive DNS services, so a single search listed thousands by title, like a table of contents.

Through a commercial passive-DNS database Claroc identified about 6,800 Muse share links and examined several hundred pages: most contained routine material, but some held sensitive information, including a marketing company's internal revenue review, a small-business loan application, a bank fraud alert with partial account details, a staff vacation calendar, confidential recruitment-process notes, and meeting notes involving a frontier AI lab. The researchers also found more than 75 saved scans of Muse share pages on the public scanning service urlscan.io.

Claroc had reported the findings through Meta's bug bounty program on Oct 8. Meta spokesperson Tracy Clayton responded: "We've paused this functionality while we review this report and consider changes to how these links can be discovered." After the pause, Claroc found previously accessible sample links no longer opened, though conversation titles may remain in commercial DNS databases; Claroc said it had no evidence the information was misused.

Key facts

1. Timeline: Oct 8 Claroc reported via Meta's bug bounty program; Oct 18 the research was published; Oct 20 Meta confirmed the pause in response to Ars Technica.
2. Muse launched in the US on Sept 8 for users 18 and older and can connect to email, calendar, payment and health apps.
3. Meta says shared Muse content generates a webpage accessible to anyone with the link; the company runs a Muse bug bounty program for surfacing potential issues.