Meta has paused the sharing functionality in its new AI assistant Muse while reviewing a privacy vulnerability discovered by researchers at security firm Claroc. The feature allows users to generate unique URLs to share conversations, images, and other content with others, similar to sharing mechanisms found in many online services.
Claroc researchers identified a flaw in how Muse constructs these shareable links. The URLs all use the domain cf.metaaiusercontent.com and include the conversation title as part of the web address, rather than burying it in the URL path. This design choice makes the links discoverable through passive DNS searches, which record historical domain name resolutions. Researchers were able to enumerate approximately 6,800 shared links and access hundreds of them, uncovering sensitive information that users clearly did not intend to make public. The researchers noted that discovering such links required minimal effort.
Claroc researchers termed this vulnerability “GhostShares,” describing pages that can be accessed by people who were never provided with the original link but can discover them through public DNS records. Researcher Asaf Aprozper reported the findings through Meta’s bug bounty program on October 8 and attempted to contact Meta representatives through LinkedIn without receiving responses.
Muse, which launched recently and quickly became one of the top-ranked apps in Apple’s App Store, is designed as a general-purpose AI agent that can autonomously fill out forms, book appointments, make purchases, and perform various other actions. The assistant requires broad access to user accounts to function as intended. Meta has marketed Muse as a trustworthy platform worthy of the extensive permissions it needs. The disclosure of this vulnerability compounds concerns about Muse’s security, following a previous zero-day vulnerability discovered by macOS security expert Patrick Wardle that could allow other applications to gain complete control of user accounts.
With the sharing feature now suspended, users no longer face this particular security risk pending Meta’s review and any potential redesign of the link mechanism.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI