Meta Re-enables Muse Sharing, Replacing Exposed Artifact URLs After Public-Link Flaw
Updated
Updated · The Verge · Oct 22
Meta Re-enables Muse Sharing, Replacing Exposed Artifact URLs After Public-Link Flaw
3 articles · Updated · The Verge · Oct 22
Summary
Meta restored Muse sharing after fixing a flaw that made some public links easy to discover and reassigned new URLs to previously shared artifacts.
Claroc researchers said Muse had generated share links from a conversation’s title and written them into public DNS, making sensitive pages findable.
Examples the researchers found included a marketing company’s internal revenue review and a small business owner’s loan application, underscoring the data-exposure risk.
Meta said the bug affected shared Muse artifacts such as documents and images—not chat sharing—and old links now direct users to request updated ones from the sender.