Researchers found thousands of Muse chats shared by link, some with loan and bank details. Meta has paused sharing, but anything you shared may have been readable.
Strangers could find and read private chats that people shared from Meta's Muse AI assistant. Security firm Claroc says one search turned up 6,800 shared Muse links. After opening a few hundred, its researchers found a loan application, a bank fraud alert and a company revenue review. Meta has now paused sharing.
Muse lets you share a chat by creating a link that anyone holding it can open. Most services make that link a long string of random characters so nobody can guess it. Muse did that too. But it also put the chat's title into the web address, such as a name like "loan-application-draft" followed by random characters.
That choice made the links findable. Public records log web addresses as they are used, and anyone can search them. Every Muse share link used the same domain, so one search could list them all. "It took one query," the researchers wrote.
The researchers say the chats they opened held information never meant to be public. Examples included:
If you never shared a Muse chat by link, this problem did not apply to you. The finding is about shared pages, not chats kept private in your own account. If you did share one, assume a stranger could have read it, especially if it held money, work or login details.
The alert box above lists the steps. The short version: remember what you shared, protect any accounts that were mentioned, and keep private documents out of chats you might share.
Meta says it paused sharing while it reviews the report and considers changes to how these links can be discovered. It did not say when sharing might return. Claroc's cofounder says he reported the problem through Meta's bug bounty program on October 8. He also tried contacting people at Meta on LinkedIn and got no reply.
The material does not say whether anyone besides the researchers opened these chats. It also does not say whether pages already shared can still be reached. The stakes are higher with Muse because it can fill out forms, make purchases and needs access to most of a user's accounts. Meta's CEO called it "built from the ground up for privacy and security" last month. A separate flaw reported by researcher Patrick Wardle earlier added to the doubts.
If you shared a Muse chat by link, treat anything private in it as exposed, and keep sensitive documents out of AI chats you might share.
A leak shows how Apple may tighten Full Disk Access on Macs, the setting that lets an app read nearly everything, as AI agent apps ask for it more often.
Read more: Apple plans to make it harder for AI apps to see all your Mac filesA report says Anthropic could trade under the ticker ANT and cites $16.3 billion in revenue. Here is what that could mean for Claude users and investors.
Read more: Anthropic stock market debut: ticker ANT, $16.3B revenueA TikTok Shop affiliate says a strong first line, an honest demo and steady posting earned him six figures last year. Here is how it works and what it costs to try.
Read more: How a TikTok creator earns six figures with a 3-second opening line
