Meta has switched sharing back on in Muse, its AI agent, after shared links turned up in public passive-DNS records this week. The fix comes with a catch. Every artifact shared before it now has a new URL, so anyone who shared one has to send it again.
Meta’s David Singleton announced the change in a post on X on October 22. He said some shared artifact URLs had been discoverable via passive DNS, and that Meta disabled sharing to prevent unintended exposure.
“The underlying issue is now fixed, and sharing is back on.”
What happens to your old Muse links
According to Singleton, anyone opening a pre-fix link will see a note asking them to get the new link from the sharer. That puts the cleanup on users. If you sent a Muse artifact to colleagues or posted it somewhere, that old link no longer leads to the content.
Singleton’s post doesn’t detail how the new URLs are generated. That includes whether artifact titles still appear in the hostnames.
New URLs also can’t erase what was already recorded. Claroc, whose research exposed the problem, noted this in an October 20 update written before the fix. It said the hostnames, titles included, remain in passive-DNS history.
Meta says it was artifacts, not chats
Singleton also pushed back on how the incident was reported. He said press coverage wrongly described a flaw in chat sharing. In his telling, the issue was specifically about shared artifacts.
The Verge reports that Meta’s help page describes artifacts as things like documents and images inside Muse. Claroc’s research and Ars Technica’s reporting described the exposed items as shared conversations. That is Meta’s claim set against the researcher’s account, and Singleton’s post doesn’t offer evidence to settle the difference.
The timeline so far
Singleton says Meta disabled sharing immediately. As we reported earlier this week, Claroc filed a report through Meta’s bug bounty on October 8 and got no reply. It published its findings on October 18. Meta paused sharing on October 20, after Ars asked about it.
According to Singleton, Meta’s bug bounty for Muse offers awards of up to $300,000 for valid findings.
What to do now
If you’ve shared anything from Muse, go back to the artifacts you sent and share the new links. Re-sharing won’t change the record, though. Per Claroc, the old hostnames and the titles in them stay in passive-DNS history. For background on what the agent does, see our look at Meta’s Muse AI agent.
Source: David Singleton on X, Claroc, The Verge
