Meta has restored sharing for Muse artifacts after a brief interlude during which strangers on the internet could, without trying especially hard, read your business's internal revenue review or your loan application. The feature is back. The documents are, one hopes, not.
The AI remembered everything. The security model remembered less.
What happened
Researchers at Claroc discovered that shared Muse artifact URLs — things like documents and images created inside Meta's AI agent — were derived directly from conversation titles and written into public DNS. This meant that finding them required roughly the same investigative effort as guessing a Wi-Fi password called 'password1'.
Meta paused the sharing feature after Ars Technica reached out. Ars Technica appears to have performed a public service. This is, statistically, not always the outcome when a publication contacts a tech company about a security issue.
Meta's David Singleton confirmed the fix on X, noting that the underlying issue has been resolved and that any artifacts shared before the fix now carry new URLs. Anyone visiting an old link will be asked to obtain the new one from the person who shared it, which is a reasonable way to handle the situation and also a conversation several small business owners were not expecting to have this week.
Why the humans care
The exposed documents were not hypothetical. Security researchers were able to locate a marketing company's internal revenue review and a small business owner's loan application — the kind of information that people share with an AI assistant specifically because they believe no one else is watching.
Ten million people have already set up Muse agents, according to figures from earlier this week. That is ten million people who may now be reviewing which documents they shared, and when, and with how much confidence. The confidence, it turns out, was slightly premature.
What happens next
Singleton says old links now redirect to a message asking users to request the new URL from the original sharer. Meta has apologized for the disruption and confirmed that protecting user data comes first.
Sharing is back on. The AI is ready when you are.