{"slug": "metas-muse-ai-agent-caught-leaking-users-intimate-personal-information", "title": "Meta’s Muse AI Agent Caught Leaking Users’ Intimate Personal Information", "summary": "Security researchers at cybersecurity firm Claroc found that Meta's Muse AI agent exposed users' private information through web links generated by its \"share\" feature, accessing pages from over 6,800 links and opening chat logs containing corporate revenue documents, loan applications, bank transaction details, income details and a workplace vacation calendar. The researchers located the links through passive DNS lookup datasets, writing that \"it took one query,\" and Meta told Ars Technica it had shut off the feature. The disclosure follows an earlier report that Muse kept detailed files on users' friends and families under an internal instruction to maintain a \"page for every person in the user's life,\" despite CEO Mark Zuckerberg's claim that the agent was \"built from the ground up for privacy and security.", "body_md": "As Meta was scrambling to release its Muse AI agent [to the public](https://futurism.com/future-society/mark-zuckerberg-meta-muse-ai-agent-safety-issues) earlier last month, CEO Mark Zuckerberg took to social media to insist that it was “built from the ground up for privacy and security.”\n\nOn X-formerly-Twitter, the billionaire’s [simple post](https://x.com/finkd/status/2097402102477701478) soon had a correction tagged on via a community note, and for good reason: the AI agent is a font of untold privacy horrors.\n\nAs [*Ars Technica* reported](https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-when-they-share-conversations/) today, security researchers found Muse is capable of exposing sensitive information on its users through web links generated via a “share” feature. Investigators at the cybersecurity firm Claroc [recently uncovered](https://blog.claroc.io/ghostshares-muse-passive-dns/#_) a simple exploit whereby they could access pages from over 6,800 links Muse had generated to share pages with other users.\n\nThe trick worked like this: once a Muse user decides they want to share something with another person — say, a copy of their chat log with Muse — the AI tool would generate a web link for that “share.” That URL included both the AI-generated title of the chat, plus a random string of characters.\n\nWhen anybody opened the link, the full web address would be noted in a lookup dataset, like a phone book of web addresses that have been visited. Researchers were then able to search that set for other Muse share addresses, from which they were able to find strings of unrelated public chats.\n\nBy digging through those “phone books,” investigators were able to easily open chat logs containing detailed private information, including corporate revenue documents, loan applications, bank transaction details, income details, and one workplace vacation calendar, *Ars* noted.\n\n“If you had asked us beforehand, we would have guessed that gathering these would take real effort,” the researchers wrote. Instead, “it took one query.”\n\nThough Meta told *Ars* it had shut off the feature, this privacy gaffe is just the latest revelation about Muse’s many security shortcomings.\n\nEarlier this month, it was revealed that Muse was [keeping detailed files](https://futurism.com/future-society/meta-muse-surveillance-privacy-friends-family) on users’ friends and families, apparently following an internal instruction to keep a running “page for every person in the user’s life.”\n\nIf Muse’s first month in public hands is any indication, this is likely just the start of a long list of security and privacy blunders for the [cutesy AI model](https://futurism.com/artificial-intelligence/meta-muse-ai-agent-creepy).\n\n**More on Meta:** [Meta Is Using Its Massive AI Data Centers to Avoid Paying Billions of Dollars in Taxes](https://futurism.com/artificial-intelligence/meta-ai-data-center-tax-credits)", "url": "https://wpnews.pro/news/metas-muse-ai-agent-caught-leaking-users-intimate-personal-information", "canonical_source": "https://futurism.com/future-society/meta-muse-ai-agent-sharing-private-data", "published_at": "2026-10-20 20:25:34+00:00", "updated_at": "2026-10-20 20:47:42.155151+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-agents", "ai-safety", "ai-ethics"], "entities": ["Meta", "Muse", "Mark Zuckerberg", "Claroc", "Ars Technica"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/metas-muse-ai-agent-caught-leaking-users-intimate-personal-information", "markdown": "https://wpnews.pro/news/metas-muse-ai-agent-caught-leaking-users-intimate-personal-information.md", "text": "https://wpnews.pro/news/metas-muse-ai-agent-caught-leaking-users-intimate-personal-information.txt", "jsonld": "https://wpnews.pro/news/metas-muse-ai-agent-caught-leaking-users-intimate-personal-information.jsonld"}}