Meta fixes Muse links that let anyone find loan files and revenue data

What happened

That came after Ars Technica asked about research showing that anyone could find pages shared from its AI agent (AI that carries out multi-step tasks rather than answering one question). David Singleton, who works on Muse at Meta, announced the fix on Thursday in a post on X.

Meta Meta fixes Muse links that let anyone find loan files and revenue data Security firm Claroc found more than 6,800 pages made through Muse sharing with a single DNS (the system that turns a domain name into an address) search. Meta has switched Muse sharing back on.

Some held a loan application, a staff holiday calendar and notes for a confidential call with an AI lab. October 23, 2026 - 8:26 am Meta has switched Muse sharing back on.

He said Meta disabled sharing immediately after a researcher published details of the flaw. The flaw affected only shared Muse artifacts , he wrote.

Some press reports had described a flaw in chat sharing, which he said was not the case. Earlier this week, a security researcher published details of a design flaw in @Muse shared artifacts: some shared artifact URLs were discoverable via passive DNS.

The underlying issue is now fixed, and sharing is back on. If you shared an artifact before the fix: it now has a new URL.