Meta has suspended the conversation-sharing feature in Muse AI after security researchers found that public DNS records could expose thousands of shared chat links.
Security researchers at Claroc discovered the issue over the weekend. Ars Technica first reported on the findings, while Meta later confirmed to Benzinga that it had paused the feature while reviewing the report.
Researchers Found Around 6,800 Shared Chats
Claroc said Muse created shared conversation URLs using a predictable structure that included the title of each conversation.
Those addresses were also written into public domain name system records. As a result, researchers could use passive DNS searches, which examine archived DNS activity, to discover shared conversations.
Claroc said one such search returned thousands of links and identified approximately 6,800 shared Muse conversations.
Researchers accessed some of those chats and found sensitive information, including meeting details involving a major AI lab, a small-business loan application, a bank fraud alert containing partial account information, a company vacation calendar and internal business documents.
Meta Suspends Muse Sharing
Meta said the Muse bug bounty program was created so security researchers could identify issues and help improve the product.
The company noted that when users shared a Muse conversation, the feature generated a webpage that anyone with the link could access.
However, Meta said it had now paused the sharing functionality while reviewing Claroc’s findings and considering changes to how those links can be discovered.
Following Meta’s update, Claroc said researchers could no longer access a sample of the previously available links.
“We are glad to see it closed this quickly,” Claroc said.
Muse Has Faced Previous Privacy Concerns
The incident follows another privacy-related controversy involving Muse.
In September, Inc. technology columnist Jason Aten alleged that Muse accessed private messages on his Mac even though he had not enabled the system’s “Full Disk Access” permission.
Meta spokesperson Andy Stone rejected the claim at the time, saying Muse can access Apple’s Messages app only when users explicitly opt in.
Meta Is Betting on Muse as a Major AI Product
The issue comes just before Meta is scheduled to report its third-quarter financial results after the market closes on Wednesday.
Analysts expect revenue of $63.36 billion, up from $51.24 billion a year earlier. Meta has beaten revenue estimates for more than 10 consecutive quarters.
Tech analyst Dan Ives expects Meta to monetize its roughly 3.5 billion-user base through the Muse AI agent, including through Facebook and Instagram.
Truist, according to market strategist Shay Boloor, estimates that Muse could generate around $29 billion in revenue by 2030, including approximately $11 billion from subscriptions.
Meta shares closed Tuesday at $694.25, down 1.59%, before rising 0.11% to $695 in after-hours trading.
The post Meta Suspends Muse AI Sharing Feature Over Privacy Concerns appeared first on ProPakistani.
