What happened?
Muse, the general-purpose AI agent Meta introduced last month, lets users share conversations through web links. Researchers at security firm Claroc said a design decision in how those links are built makes them easy to discover.
6,800 links and sensitive data
The researchers were able to enumerate 6,800 sharing links created by users. After opening a few hundred of them, they found information that was clearly not intended to be publicly available.
Why it matters
Meta CEO Mark Zuckerberg said Muse was "built from the ground up for privacy and security." But share URLs that should be long and unguessable being easy to find undercuts that claim. Because conversations can contain business secrets and personal details, the risk affects a broad user base.
