Muse, the new general-purpose AI agent from Meta, can expose sensitive information when users share conversations through web links, researchers reported Monday. In response to questions from Ars about the behavior, Meta said it’s suspending the sharing feature while the company reviews it and considers making changes.
Like many online services, Muse has allowed users to share searches, conversations, images, and similar content with other people. Such share features usually involve clicking an option to create a unique URL that anyone can use to load a page hosting the content. To keep potentially sensitive information from being accessible to unintended people, the URLs typically contain a long sequence of text that can’t be easily guessed.
A single query is all that’s required
Muse, which Meta CEO Mark Zuckerberg said last month was “built from the ground up for privacy and security,” seems to take the same precautions. But a central design decision for constructing URLs has made the links easy to discover. As a result, researchers from security firm Claroc said they were able to enumerate 6,800 links Muse users created for sharing conversations with others. After opening a few hundred of them, the researchers found information that was clearly not intended to be publicly available, including:
YouTube might be testing hiding the dislike button
October 21, 2026
Judge dismisses Sam Altman’s sister’s sexual abuse lawsuit
October 20, 2026
Trump is giving Nick Shirley $10,000 and launching a $25 million fraud bounty program
October 20, 2026
Google’s more personalized Gemini AI is heading to your car
October 20, 2026
Merging SpaceX and Tesla would be a "good idea," Musk says
October 20, 2026
Cops raid office of RFK Jr. allies planning “unethical” vaccine trial on babies
October 20, 2026
Police Commemoration Day: Tamil Nadu CM Vijay pays floral tributes
October 21, 2026
Foursquare co-founder says equity holders saw no returns from the company’s acquisition
October 21, 2026
AI promises productivity, but for managers, it’s mostly a headache for now
October 21, 2026
RATHAVETTAI EPISODE 10 : ரவுடியிலிருந்து தாதாவான காக்காத்தோப்பு பாலாஜியின் க்ரைம் ஃபைல்ஸ் !
October 21, 2026
Heat pump tech is 170 years old. Pascal thinks it’s time for an update.
October 21, 2026
Mach9 raises $34M after pivoting to AI CAD software
October 21, 2026