Meta pauses Muse share links after Claroc finds 6,800 exposed

Meta launched Muse as a general-purpose AI agent that autonomously fills out forms, books appointments, makes purchases, and creates documents, which requires access to most of a user's accounts. CEO Mark Zuckerberg said last month that Muse was "built from the ground up for privacy and security," and Meta opened a bug bounty program for the product.

The link design placed conversation titles in the subdomain rather than the URL path, so public DNS records made them searchable. Claroc calls these GhostShares: pages that open for people who were never handed the link. The researchers said gathering the links took one query, not real effort.

The exposure follows a separate security finding: three weeks after launch, macOS security expert Patrick Wardle discovered a zero-day vulnerability that let any other app on the same device gain complete control of a user's Muse account. Meta downplayed that severity, saying exploitation required an already-compromised device, and did not acknowledge Wardle's finding that a simple ClickFix attack was enough. With the sharing feature suspended, Muse users no longer face this particular threat for now, but the episodes raise questions about whether the assistant is worthy of the access it requires.