As Meta was scrambling to release its Muse AI agent to the public earlier last month, CEO Mark Zuckerberg took to social media to insist that it was “built from the ground up for privacy and security.”
On X-formerly-Twitter, the billionaire’s simple post soon had a correction tagged on via a community note, and for good reason: the AI agent is a font of untold privacy horrors.
As Ars Technica reported today, security researchers found Muse is capable of exposing sensitive information on its users through web links generated via a “share” feature. Investigators at the cybersecurity firm Claroc recently uncovered a simple exploit whereby they could access pages from over 6,800 links Muse had generated to share pages with other users.
The trick worked like this: once a Muse user decides they want to share something with another person — say, a copy of their chat log with Muse — the AI tool would generate a web link for that “share.” That URL included both the AI-generated title of the chat, plus a random string of characters.
