MENLO PARK, CALIFORNIA / RankWire.AI / – Meta has put a hold on the chat sharing feature within its Muse AI assistant after security researchers revealed that thousands of shared conversation links were accessible through publicly available internet records. This exposure potentially risked revealing private personal and corporate information. On Tuesday, October 20, Meta announced that it had temporarily disabled the feature while it investigates the incident. The company is currently considering modifications to how shared links can be located.
The discovery was made by security firm Claroc, which identified more than 6,800 Muse share links within passive DNS data. These records log Domain Name System lookups and can expose website addresses to anyone examining the data. Claroc reported that it notified Meta through its bug bounty program on October 8 and published its findings on October 18. The 6,800 count refers to found addresses, not sensitive chat content.
A few hundred of these conversations were reviewed by Claroc’s team, with nearly all shared links being accessible without requiring a login. Among the exposed data were a small-business owner’s loan application including part of an account number, as well as a note about a bank fraud alert. Other documents included a marketing firm’s revenue review prepared for its chief executive and a real-estate investor’s report detailing mortgages and returns. Confidential interview prep notes also appeared accessible.
Hostnames exposed chat titles
The core issue stemmed from how Muse’s sharing URLs were constructed. Each URL incorporated the conversation title and a random identifier within the hostname. While this identifier was not easily guessable, visiting a link triggered a DNS lookup that passive DNS services could record. As a result, individuals who had not received the link could find it stored in these databases. Importantly, the shared conversations could be accessed without any login requirement.
Muse’s configuration instructed search engines and AI crawlers to ignore its shared pages; however, researchers found no need to rely on search engines to locate them. Over 75 saved scans of Muse share pages were stored on urlscan.io. Claroc stated that there was no evidence of data misuse and that it had not contacted affected users. The firm also mentioned that it was unable to determine if others had discovered the links. Meta’s official statement did not specify whether users would be notified about this incident.
Sharing feature suspended pending review
On October 20, when Claroc revisited 40 previously accessible shares, none of them loaded, and their addresses returned errors. Despite this, the conversation titles remain present in passive DNS logs. Muse was launched in the United States on September 8, targeting adults aged 18 and over. It offers integrations with email, calendar, payment, and health applications. In April, Meta introduced its Muse Spark model, developed by its superintelligence research division.
This incident underscores growing concerns about privacy within AI tools and the dangers of sharing chats containing sensitive data. In 2025, shared ChatGPT conversations appeared in Google search results, which led OpenAI to eliminate the feature that allowed indexing. Additionally, in August, Meta was ordered to fund teen mental health programs in New Mexico. The company has not yet announced when Muse’s sharing feature will be restored or how the link management will be altered.