What happened
- Security firm Claroc reported on October 8, through Meta’s bug bounty program, that links to shared Muse chats could be found in public DNS records.
- Each shared link put the conversation title inside the server name, under the domain cf.metaaiusercontent.com. A passive DNS service had logged them.
- Claroc enumerated more than 6,800 links. Examples include a loan application, a bank fraud alert with partial account details and internal company documents.
- Meta said it paused the feature “while we review this report and consider changes to how these links can be discovered.” Claroc retested 40 links on October 20 and none opened.
Why it matters
- The leak did not come from the shared page but from its address. Someone who shares a chat believes they are handing a document to a person, and in fact publishes a title in a record others can read.
- For a Chilean small business or firm that pastes contracts, bank statements or spreadsheets into an assistant, the practical rule changes: sharing is publishing, and the chat title can hold the sensitive detail.
- Whoever processes third-party data answers for it even when the fault is the vendor’s, a principle that Chile’s personal data protection law, Law 21.719, spells out.
The number
40 of 40: links Claroc had opened before that no longer opened on October 20.
Context
Muse is the assistant Meta gave its own email and brought to its glasses. Claroc clarified that the problem affects only pages users chose to share, not all private conversations, and said it found no evidence of misuse. Even so, the names, titles included, remain in passive DNS history, so turning the links off does not erase what was already recorded.
What’s next
- Meta has not said whether it will reactivate the feature or invalidate the 6,800 existing links.
- No announced timeline for changing how addresses are generated.
- Check which Muse chats were shared and remove them before the feature comes back.
Bottom line
When an assistant recovers secrets from earlier chats, the risk lies in what the chat remembers. Here it lies in how the address where it lives is named.
Sources
- Engadget — Meta suspends Muse chats sharing feature after it left private details exposed — October 20, 2026, with Meta’s statement. The original Claroc report could not be opened; the figures reproduce its content as reported here
- eSecurity Planet — One DNS query revealed 6,800 Meta Muse chat links
- Image: Japanexperterna.se, CC BY-SA 2.0, via Wikimedia Commons
Edited by Rodrigo Cornejo. How we select and verify: who writes these notes.
