Meta's new AI agent Muse can expose sensitive personal and business information when users share conversations through web links, researchers from security firm Claroc reported Monday.

Muse, which Meta CEO Mark Zuckerberg said last month was "built from the ground up for privacy and security," creates shareable URLs for searches, conversations and images. But the design of those URLs made them easy to find: all use the domain cf.metaaiusercontent.com and include the conversation title alongside a long text string.

Using a single passive DNS query, the researchers enumerated 6,800 share links. Opening a few hundred revealed clearly private material, including a candidate's notes for a confidential executive-search call naming an AI lab's internal contact and meeting time, a marketing company's internal revenue review marked for its CEO, a small-business owner's loan application with the requested amount, a to-do list containing a bank fraud alert with a partial account number and transaction details, a real-estate investor's performance report with two property addresses and exact return, income and mortgage figures, and a workplace's full-year staff vacation calendar.

"If you had asked us beforehand, we would have guessed that gathering these would take real effort," the researchers wrote. "It took one query."

Source: Ars Technica