Meta has suspended the conversation-sharing feature in its Muse AI agent after security firm Claroc showed that shared Muse conversations could be found by anyone — not just the people they were sent to. Claroc calls the exposed pages GhostShares.

Muse shares a conversation as a web page whose address is built from the conversation's own title plus a random identifier. Those hostnames are recorded by passive DNS services, so a single search of a commercial passive-DNS database returned more than 6,800 shared Muse links, listed by title like a table of contents. In a sample of several hundred pages, most were harmless, but some held a small-business loan application, a bank fraud alert with partial account details, an internal company revenue review, a staff vacation calendar and confidential prep for a call with a frontier AI lab leader.

Claroc reported the flaw through Meta's bug bounty program on October 8 and published its research on October 18. After Ars Technica asked Meta about it, Meta said on October 20 that it had paused the functionality while it reviews the report; Claroc rechecked 40 previously open shares that day and none opened. The hostnames, titles included, remain in passive-DNS history, and Claroc says it has no evidence the information was misused.