Meta Muse's conversation-sharing feature exposed sensitive personal and business data due to predictable URL generation, allowing researchers to enumerate over 6,800 shareable links. Sensitive information found included loan applications, bank fraud alerts, internal revenue reviews, and confidential meeting details. Meta has suspended the sharing feature while reviewing and considering changes.
Background
Meta recently launched Muse as a general-purpose AI agent, promoted by Mark Zuckerberg as being built from the ground up for privacy and security. This incident highlights a gap between claimed privacy commitments and actual implementation.
- Source
- Ars Technica
- Published
- Oct 20, 2026 at 08:33 PM
- Score
- 7.0 / 10