In brief
Claroc researchers said they collected 6,800 links to shared conversations, some containing sensitive information. Meta said it was reviewing the findings.
Meta has temporarily suspended conversation sharing in its Muse AI assistant after researchers reported that outsiders could discover and read shared chats, RBC-Ukraine reported on October 21, citing Ars Technica and a company response.
Researchers at Claroc said they collected 6,800 links created by users to share conversations. A sample review of several hundred pages revealed internal financial documents, personnel information and partial bank account details. The link count does not establish how many people were affected.
According to the researchers, chat titles appeared in URL subdomains that were recorded in passive DNS databases when links were opened, allowing people who had never received the links to discover them. Claroc said it reported the issue through a bug bounty programme on October 8. Meta said it had paused sharing while reviewing the report and considering changes to how links could be discovered. RBC-Ukraine's report did not specify whether a fix had been completed.