Meta Muse exposes users' personal and business secrets when they share conversations
A single query is all that's required to find thousands of conversations listed by title.
Meta's new AI agent, Muse, has been discovered to potentially expose sensitive personal and business information when users share conversations via web links, according to researchers. The study, conducted by security firm Claroc, highlights the platform's unique URL construction method as the source of the vulnerability. By clicking on an option to generate a unique URL, users can share various content, including conversations.
However, these URLs contain long sequences of text that can unintentionally reveal sensitive data if accessible to unintended individuals. Despite Meta CEO Mark Zuckerberg's claims that Muse is designed with privacy and security in mind, the researchers successfully enumerated 6,800 links created by Muse users for sharing conversations.
Upon reviewing a few hundred of these links, the researchers found information that was clearly not intended for public access, such as confidential discussions or private data.
Written by urgent.news from Ars Technica's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
