Meta's Muse exposed 6,800+ private AI chats via searchable share links
SumitGup · x · 2026-10-21
- Meta's Muse share feature created web links titled after shared conversations, which ended up in publicly accessible records.
- Security firm Claroc found 6,800+ shared conversations in a single search, including loan applications, a bank fraud alert, and confidential company documents.
- Anyone could open the links without a password or permission. Per the diagram, share subdomains on Cloudflare CDN are named after conversation titles, so anyone with passive-DNS access can enumerate and rebuild share links with no login required.
- Meta suspended the sharing feature, but exposed link records remain publicly accessible.
Related event: Meta Muse leaks over 6,800 private conversations(2 posts)→
More from Safety
- LiteLLM supply chain attack, PHP flaws found by GPT-5.6: AI is making hacking faster and cheaper — Yuchenj_UW · 2026-10-21
- Researcher calls for independent tests of claims Chinese models write insecure code — dbreunig · 2026-10-21
- China Fines Firms for Poisoning AI Chatbot Answers With Fabricated Content — Sanbi_Ai · 2026-10-21
- FBI alerts on two critical PHP RCE flaws, CVSS 9.2, patch immediately — burny_tech · 2026-10-21
- Does opencode phone home even with local models? Users flag data concerns — Unusual_Principle536 · 2026-10-21
- Researcher's sardonic recipe: persistent agents, cyberoffense RL, monitors off — 'spooky emergent behaviors' — sebkrier · 2026-10-21