Meta pauses Muse chat sharing after 6,800 shared chats surface in DNS

Meta launched its Muse AI agent in September 2026. When users shared a chat, Muse put the chat's title into the link's web address. Those addresses ended up in public DNS records, which anyone can search. On October 18, the security firm Claroc reported finding more than 6,800 shared-chat links with one search. The pages opened without a login. Some held a small-business loan application, a CEO's revenue review, a bank fraud alert with a partial account number and a staff vacation calendar. Muse told search engines not to crawl the pages, but that did not cover DNS. After Ars Technica asked, Meta paused sharing on October 20.