Meta introduced its Muse agentic AI platform last month.
According to Engadget, each shared address used the conversation title in its subdomain and was written into public DNS. Claroc said one passive-DNS search could return thousands of links and reported enumerating 6,800 shared Muse conversations. The researchers said exposed material included meeting times, a small-business loan application, a bank fraud alert containing partial account details, a vacation calendar, and internal company documents.
Meta told Ars Technica that it had paused the functionality while reviewing the report and considering changes to link discoverability. Claroc said a sample of links it had previously opened was no longer accessible after Meta's update.
The report does not establish that all Muse chats were exposed, that the underlying Muse system was breached, or how many affected links were accessed by parties other than the researchers. It describes discoverability of chats whose users had created sharing links.