Meta has re-enabled the public sharing feature for its Muse AI tool after security researchers warned that conversation links were exposed in public domain name systems. Experts at Claroc discovered that these web addresses, which used conversation titles as filenames, allowed anyone to locate private discussions without authentication. The vulnerability meant sensitive documents, such as a marketing firm’s internal revenue review and a small business owner’s loan application, were easily accessible to the internet. Meta paused the function temporarily following reports from Ars Technica and directly contacted researchers to address the flaw.
The company now states that the underlying issue has been resolved and the feature is active again. This incident highlights a specific failure in how AI platforms manage public data exposure.
* Conversation titles were written directly into public DNS records.
* Sensitive business documents were found via simple link searches.
* Meta restored access after confirming the fix with security experts.
