Skip to main content
Back to brief

Tech · October 21, 2026

A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse

2 sources →

Meta has suspended the sharing feature of its new AI agent, Muse, after security researchers at Claroc discovered a design flaw. The vulnerability allowed unauthorized access to sensitive user data, including personal and business information, via shareable URLs. Following reports from researchers and inquiries from Ars Technica, Meta disabled the feature while it reviews potential security improvements.

Read the original coverage

Reported by multiple outlets

  • Meta's AI agent Muse has a security vulnerability in its link-sharing feature.
  • The flaw allows unauthorized users to access shared conversations and sensitive information.
  • Meta has suspended the sharing feature while it reviews the issue.
  • The discovery was made by researchers at the security firm Claroc.

Reported by only some outlets

  • The New York Post and Engadget report that researchers were able to access over 6,800 exposed links.
  • The New York Post notes that Mark Zuckerberg had previously emphasized the privacy and security of Muse.
  • Engadget reports the vulnerability involved the use of a common domain name and a specific URL structure ('muse.meta.com/share/') that could be found via passive DNS searches.

About these outlets

CadNews does not determine absolute truth or endorse political viewpoints. It compares publicly available reporting, identifies shared facts, highlights framing differences, and flags uncertainty.