From WIRED · Dan Goodin, Ars Technica · · 2m
Meta's Muse exposes private chats through flawed share links
Researchers discovered that Muse's conversation-sharing feature makes it trivially easy to find and access other users' sensitive information through public DNS records.
In brief
Researchers discovered that Muse's conversation-sharing feature makes it trivially easy to find and access other users' sensitive information through public DNS records. Security researchers found that Meta's Muse AI agent exposes users' private conversations through a design flaw in its share links, prompting Meta to…
Muse's share links expose private data
Meta's Muse AI agent can expose sensitive information when users share conversations through web links, researchers from security firm Claroc reported Monday. Meta suspended the sharing feature in response.
What researchers found in shared links
Claroc researchers enumerated six thousand eight hundred links and found confidential information including executive-search notes, internal revenue reviews, loan applications, and staff vacation calendars.
The discovery was surprisingly easy
Researchers said gathering the links took one query using passive DNS searches through commercial services. They expected the process to require real effort but found it trivial.
“If you had asked us beforehand, we would have guessed that gathering these would take real effort. It took one query.”
The design flaw explained
All Muse share links use the domain cf.metaaiusercontent.com with the conversation title in the subdomain. Examples include home-sale-budget-nine f twenty-one c eight a three dot cf dot metaaiusercontent dot com.
Why this matters for Muse users
Muse requires access to most of a user's accounts to work as intended. Meta marketed it as worthy of this extraordinary trust, but the share-link flaw raises questions about its security.
Earlier security problems with Muse
Three weeks after launch, macOS security expert Patrick Wardle discovered a zero-day vulnerability allowing any app on the same device to gain complete control of a user's Muse account.
Researcher reported findings in October
Asaf Aprozper, cofounder and CTO of Claroc, reported the findings through Meta's bug bounty program on October eight and tried reaching Meta on LinkedIn but received no reply.
Meta suspends the feature
With Meta's suspension of the sharing feature, Muse users no longer face this particular threat, at least for now. The company reviews the report and considers changes to link discovery.
The main idea
Security researchers found that Meta's Muse AI agent exposes users' private conversations through a design flaw in its share links, prompting Meta to suspend the feature.
