GoKawiilMeta pauses Muse AI chat-sharing feature after DNS leak exposed private links
Meta has suspended the conversation-sharing feature in its Muse AI assistant after security firm Claroc found that over 6,800 shared chat links were discoverable through public DNS records. Some of the exposed pages contained sensitive business documents and personal financial information accessible without any login. Meta spokesperson Tracy Clayton said sharing has been paused while the company reviews the report and considers changes to how links are generated.
GoKawiil's interpretation of the reporting above, not reported fact.
The flaw stemmed from Muse embedding both descriptive titles and random identifiers in hostnames rather than in URL paths, which allowed passive DNS logging services to inadvertently record and expose supposedly private share links. This incident suggests that even long, random identifiers can fail to protect privacy if placed in a part of the URL that gets logged by internet infrastructure, a design lesson that could affect other AI tools with similar sharing mechanisms.
- Meta paused Muse's chat-sharing feature after researchers found thousands of exposed conversation links.
- The leak occurred because titles and identifiers were placed in hostnames, which get recorded in public DNS logs.
- Some exposed pages contained sensitive business and financial information accessible without login.
Source: techspot.com — Skye Jacobs, 2026-10-21
Published there as: “Meta suspends Muse sharing after sensitive documents turn up in shared chats”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.