Meta has paused the feature in its Muse AI assistant that lets users share conversations, after researchers found thousands of the resulting links on the open web.
The researchers, at the security firm Claroc, said they found more than 6,800 Muse links through public DNS records. DNS, the Domain Name System, is the internet's address book, and much of it can be searched by anyone. Muse spokesperson Tracy Clayton said in an emailed statement that people can share specific Muse artifacts, which creates a page "that can be accessed by those with the link." Meta has "paused this functionality while we review this report," Clayton said.
The company's own description is worth reading closely. A page open to anyone with the link is private only as long as the link stays hard to find. Claroc's finding is that, for at least 6,800 of them, it did not. Clayton described a feature that works through links, and then announced it was switched off.
Share links are a common convenience in chat tools, and the trade-off is familiar: easy for the sender, exposed if the address travels. A link that anyone can look up is closer to a published page than a private message, whatever the sender assumed when they clicked share.
The more telling question is what comes back. A relaunched Muse could keep link-based access, or it could require the viewer to prove who they are. The pause alone settles neither.