You asked an AI agent to help with your loan application. You hit “share” to send it to one person. Who else could find it?
Muse, the new general-purpose AI agent from Meta, “can expose sensitive information when users share conversations through web links,” Wired reported, in a story that first appeared on Ars Technica. Researchers reported the problem on Monday, 19 October 2026.
Researchers from security firm Claroc said they were able to enumerate 6,800 links that Muse users created to share conversations, according to Wired. After opening a few hundred of them, they found information that was clearly not meant to be public.
Wired listed what they found:
- a small-business owner’s loan application, with the amount requested
- a to-do list with a bank fraud alert, a partial account number and a transaction amount and time
- a national marketing company’s internal revenue review, marked for its CEO
- a real-estate investor’s performance report, with two property addresses and exact return, income and mortgage figures
- a workplace’s full-year staff vacation calendar
The researchers wrote: “If you had asked us beforehand, we would have guessed that gathering these would take real effort.” Then: “It took one query.”
ONE query.
How The Links Leaked
Share links usually hide behind a long string of text that can’t be easily guessed, Wired explained. Muse links carry a long string too. So what went wrong?
According to Wired, all Muse share links use the domain name cf.metaaiusercontent.com, and Muse put the conversation title in the subdomain, next to the random string. Wired gave simplified examples such as loan-application-draft-a4c9e2.cf.metaaiusercontent.com.
When the intended person clicks the link, the DNS information is recorded in a passive DNS database, a searchable record of past lookups available through many commercial services, Wired reported.
Claroc put it this way: “What makes Muse’s shares easy to find is the title sitting inside the web address, where public DNS records it for anyone to search.” The firm calls these pages “GhostShares.”
Your private title became a public address. And the address was in a searchable database.
Meta Hits Pause
Asaf Aprozper, a cofounder and CTO of Claroc, said he reported the findings through Meta’s bug bounty program on 8 October 2026 and also tried reaching people at Meta on LinkedIn but got no reply either way, Wired reported.
After questions from Ars Technica, Meta said in an emailed statement: “we’ve paused this functionality while we review this report and consider changes to how these links can be discovered.”
In September 2026, Meta’s CEO said Muse was “built from the ground up for privacy and security,” according to Wired.
And Muse asks for a LOT. Wired reported that the agent fills out forms, books appointments and makes purchases, and that “Muse requires access to most of a user’s accounts.”
This is not the first Muse security report. Wired reported that macOS security expert Patrick Wardle found a zero-day vulnerability, three weeks after launch, that let another app on the same device take control of a user’s Muse account. Meta downplayed its severity on the grounds that exploitation wasn’t possible unless a device was already compromised, Wired reported.
With the feature paused, Wired said, Muse users no longer face this particular threat, “at least for now.”
At least for now. How much of your life would you hand to a system that holds keys to most of your accounts?
Hold Your Own Keys
This is not a Monero story. It is a story about what happens when someone else holds your stuff.
A self-custody wallet keeps your keys on your own device, not with an exchange. Monero hides the sender, the receiver and the amount of each payment by default. Monero One is a free, open-source, self-custody Monero wallet for iPhone and Android. Your keys stay on your device, and the app sends us no analytics. Full disclosure: the host built Monero One. He’s biased. He’s also right.
Wondering what your wallet’s network connection can reveal? Read about remote node privacy.
Follow @MoneroOne on X and join the Resistance on Telegram (t.me/monero_one).
SOURCES
Join the resistance in style: get Monero One at no cost. It stays free.
Comments
Talk about this story with the resistance on Telegram.
Join the discussion