Meta pauses Muse sharing after discoverable links exposed confidential user data
A public-link design exposed sensitive agent conversations and forced a rethink of how they are shared.
Researchers enumerated 6,800 Muse share links because conversation titles appeared in publicly searchable DNS subdomains, and their review of a few hundred found confidential hiring, revenue, banking and property details. Meta paused the feature while it reviews link discoverability, saying users had intentionally created pages accessible to anyone with the URL. For agent products that depend on broad account access, the failure shows how one distribution feature can undermine the trust needed to own users’ information workflows.