Ethical Hacking News
Meta's AI assistant, Muse, has been found to have a design flaw that exposes users' personal conversations to unauthorized access. The flaw was discovered by security researchers at Claroc, who reported that they were able to enumerate 6,800 links created by Muse users for sharing conversations with others. These links, which contain a unique URL and conversation name, were easily discoverable through passive DNS records, making it possible for anyone to access sensitive information shared with the AI assistant. The vulnerability has been suspended, but it highlights the need for Meta to review its design decisions and implement more robust security measures to protect users' personal data.
Meta's Muse AI agent has a design flaw that exposes users' personal conversations to unauthorized access. The flaw was discovered by security researchers at Claroc, who found that 6,800 share links were easily discoverable through passive DNS records. The design decision behind the URLs used by Muse allowed anyone to guess and access the links without the intended recipient's knowledge or consent. The vulnerability is not the first major security issue with Muse, following a zero-day vulnerability discovered by Patrick Wardle in September. The suspension of the share feature is a step in the right direction, but highlights the need for Meta to review its design decisions and implement more robust security measures. The discovery of the vulnerability emphasizes the importance of bug bounty programs in identifying security issues and the need for companies to prioritize user privacy and security.
Meta's Muse, a general-purpose AI agent, has been found to have a design flaw that exposes users' personal conversations to unauthorized access. The flaw was discovered by security researchers at Claroc, who reported that they were able to enumerate 6,800 links created by Muse users for sharing conversations with others. These links, which contain a unique URL and conversation name, were easily discoverable through passive DNS records, making it possible for anyone to access sensitive information shared with the AI assistant.
The researchers found that the URLs used by Muse were constructed in a way that made them easily guessable, with the conversation name sitting inside the subdomain rather than in the URL path. This design decision, known as "GhostShares," made it possible for anyone to find and access these links without the intended recipient's knowledge or consent.
The vulnerability was first reported by Claroc's Asaf Aprozper, who also tried reaching out to Meta's bug bounty program but received no response. The researchers then reported their findings to Meta, who has since suspended the feature until further notice.
This is not the first major security issue with Muse. In September, macOS security expert Patrick Wardle discovered a zero-day vulnerability that allowed any other app installed on the same device to gain complete control of the user's Muse account. Meta downplayed the severity of the vulnerability, but the ease of discovering share links further raises concerns about the security of Muse.
The suspension of the share feature is a step in the right direction, but it highlights the need for Meta to review its design decisions and implement more robust security measures to protect users' personal data. As AI assistants like Muse become increasingly popular, it is essential that companies prioritize user privacy and security to prevent vulnerabilities like this from occurring in the future.
In addition to the security concerns, the vulnerability also raises questions about the trustworthiness of AI assistants like Muse. While Meta has heavily marketed Muse as a platform that requires extraordinary trust, the ease of discovering share links suggests that this trust may not be entirely justified. Users may need to be more cautious when sharing sensitive information with AI assistants, and companies like Meta need to take a more proactive approach to addressing these vulnerabilities.
The discovery of this vulnerability also highlights the importance of bug bounty programs in identifying security issues. Claroc's report to Meta's bug bounty program was a crucial step in bringing this issue to light, and it demonstrates the value of these programs in helping companies improve their security.
In conclusion, the vulnerability in Meta's AI assistant raises serious concerns over user privacy and security. The suspension of the share feature is a step in the right direction, but it highlights the need for Meta to review its design decisions and implement more robust security measures to protect users' personal data. As AI assistants like Muse become increasingly popular, it is essential that companies prioritize user privacy and security to prevent vulnerabilities like this from occurring in the future.
Related Information:
https://www.ethicalhackingnews.com/articles/A-Vulnerability-in-Metas-AI-Assistant-Raises-Concerns-Over-User-Privacy-and-Security-ehn.shtml
https://www.wired.com/story/a-design-flaw-in-share-links-exposes-users-personal-conversations-with-meta-muse/
https://www.socinvestigation.com/comprehensive-list-of-apt-threat-groups-motives-and-attack-methods/
https://en.wikipedia.org/wiki/Advanced_persistent_threat
Published: Wed Oct 21 12:21:51 2026 by llama3.2 3B Q4_K_M
