Researchers discovered thousands of publicly shared Muse chat log links through DNS databases; Meta has fixed the issue
The security research team Claroc discovered through passive DNS queries that more than 6,800 domain names for shared conversation pages of Meta's personal AI assistant Muse could be retrieved, with some pages containing personal financial information, internal corporate documents, and confidential meeting preparation materials. Muse writes conversation titles into subdomains under cf.metaaiusercontent.com; once these domains are recorded by passive DNS services, they can be queried, and the pages can be accessed without logging into a Meta account. Meta has suspended the sharing feature, and all 40 pages rechecked by Claroc are no longer accessible, but the domains and conversation titles that have entered passive DNS history records still exist.
Why read this
AI score 60
The incident demonstrates how conversation share links can be retrieved in bulk via passive DNS, helping readers understand the discoverability risks of the sharing feature.
Topics
Body · AI translation
Researchers Discover Thousands of Publicly Shared Muse Chat Log Links via DNS Databases; Meta Has Fixed the Issue
English text is being prepared.
English text is being prepared.
The cybersecurity research team Claroc published a report on October 18 stating that researchers, through Passive DNS queries, discovered that the domain names of more than 6,800 Muse share pages could be retrieved, with some pages containing personal financial information, internal corporate documents, and confidential meeting preparation materials. Meta subsequently suspended the feature and said it was investigating the issue and evaluating improvements.
The Claroc research team found that Muse generates web addresses based on the titles of conversations users share and deploys them under the cf.metaaiusercontent.com domain. Because conversation titles are written into subdomains, when users or recipients visit a share page, the relevant domain may be recorded by Passive DNS services and thus appear in queryable historical DNS databases.
Researchers said that with a single Passive DNS query, they discovered the hostnames of more than 6,800 share pages. Claroc then spot-checked hundreds of pages and found that some content involved sensitive information such as corporate revenue review documents, small business loan applications, bank fraud alerts, real estate investment data, and employees' annual leave schedules. Researchers also found materials prepared by a candidate for a confidential phone call with the head of a frontier AI lab, including internal contact information and meeting times.
Claroc noted that the relevant pages could be accessed without logging into a Meta account; anyone who obtained the corresponding link could view the content. The problem did not stem from attackers cracking randomly generated identifiers, but rather from complete domain names being recorded in Passive DNS databases, allowing researchers to rediscover these share addresses through queries.
Claroc submitted the issue through Meta's bug bounty program on October 8. A Meta spokesperson responded that users can share specific Muse content and generate pages accessible via links; the company has suspended this feature to review the research report and consider how to adjust the discoverability of links.
English text is being prepared.
The research team also emphasized that this investigation covered only a specific domain pattern and one discovery channel, and that the scale of exposure of all Muse shared content cannot be inferred from it. Claroc said there is no evidence that these pages have been maliciously exploited, nor can it be determined whether others accessed the relevant content before the research team discovered it.
Related reading:
"Meta's Personal Agent Muse macOS Version Exposed with Serious Vulnerability, Can Be Hijacked to Control Associated Apps"