Meta pauses and resumes Muse sharing feature due to security vulnerability
Current overview (not historical)
Meta temporarily paused the Muse sharing feature after security researcher Claroc discovered over 6,800 publicly exposed AI chat links in DNS records. These links, structured by title, dialogue phrases, and random IDs, allowed reconstruction of conversations containing sensitive information such as marketing data, loan applications, and work schedules. Meta later stated the URL vulnerability had been fixed and restored the sharing function, noting that old links would prompt users to obtain new ones.
Written with AI from the reporting · updated 10/22/2026
Expand the detailed fact route and sources
Story route
A station-by-station route from the first public evidence onward; every station carries its own evidence and uncertainty.
- 1Unclassified fact stationOct 21, 00:00recorded Oct 21, 02:42single sourcerevised
Meta pauses Muse sharing after researchers find AI chats on
Read original source ↗ The Verge · AIReplay this moment in the explorerEvidence & revisions · 1 source records
- Subject：
- meta
- Action：
- paused Muse sharing functionality
- Object：
- AI conversation sharing links
- Occurred (fact side)：
- Oct 21, 00:00
- Published (valid side)：
- Oct 21, 02:07
- First seen (known side)：
- Oct 21, 02:42
Fact stationSingle source · one-sided claimRevisedCopy may have been revised later; time replay is bounded. Layer labels group reading only, not causation between layers.
- 2Unclassified fact stationOct 22, 00:00recorded Oct 23, 06:56single sourcerevised
Meta turns Muse sharing back on
Read original source ↗ The Verge · AIReplay this moment in the explorerEvidence & revisions · 1 source records
- Subject：
- meta
- Action：
- re-enabled Muse sharing
- Object：
- shared Muse artifacts
- Occurred (fact side)：
- Oct 22, 00:00
- Published (valid side)：
- Oct 23, 04:24
- First seen (known side)：
- Oct 23, 06:56
Fact stationSingle source · one-sided claimRevisedCopy may have been revised later; time replay is bounded. Layer labels group reading only, not causation between layers.
Uncertainty marks flag where to check the sources; they are not proven causation.
Report timeline
Explore every side through dated source reports.
- The Verge · AIRelated fact: single sourceSource report revisedMeta re-enables Muse sharing after fixing public link vulnerability
Report first recorded Oct 23, 06:56
Meta has turned Muse sharing back on after security researchers reported that public links to shared Muse 'artifacts' could be easily found. The vulnerability, reported by Claroc researchers, involved Muse shared conversation web addresses being named after the conversation's title and written into public DNS. Meta's David Singleton said the underlying issue with artifact URLs is fixed, and any previously shared artifacts now have new URLs; old links will prompt users to get the new one.
Read original source ↗
- The Verge · AIRelated fact: single sourceSource report revisedMeta pauses Muse sharing after researchers find AI chats publicly available on the web
Report first recorded Oct 21, 02:42
Meta has paused the Muse sharing feature after security researchers at Claroc discovered over 6,800 shareable links to AI conversations indexed in public DNS records. The researchers found that the link structure, which incorporates the conversation title and a random ID, allowed them to reconstruct URLs and access private discussions, including some containing marketing data, loan applications, and staff calendars.
Read original source ↗
Event discussion
Reader opinions are hosted on GitHub Discussions; posting requires a GitHub account. Comments are not verified facts.