Meta has paused the feature that creates shareable links for conversations with its Muse AI assistant. The change followed a report from security firm Claroc, which said it found more than 6,800 Muse links through public Domain Name System records.
Muse generated a web address using a conversation title, a short descriptive phrase, and a random identifier. Claroc said the hostname often revealed what the page contained, while DNS records exposed enough information to reconstruct the full link.
Researchers reported viewing conversations that included a company revenue review, a small-business loan application, a workplace calendar, and notes for a job-candidate call. The pages were intended for people who had the link, but the design made those links easier to discover than users may have expected.
A Meta spokesperson said the company paused sharing while it reviews the report and considers changes to link discovery. The incident does not mean every Muse conversation was public, but it shows why “anyone with the link” should not be treated as equivalent to private access when URLs leak through internet infrastructure.