分享链接的一处设计漏洞可泄露用户与Meta's Muse的私人对话 - AI News

分享链接的一处设计漏洞可泄露用户与Meta's Muse的私人对话

2026-10-21

新闻要点

周一，安全研究者披露 Meta 新推出的通用 AI 代理 Muse 的分享链接存在设计缺陷，可使用户私人对话等敏感信息被非授权获取，Meta 已确认该问题，宣布暂停 Muse 分享功能，后续将开展全面核查调整。

- Muse 漏洞测试：研究者成功枚举 6800 条用户对话分享链接

- 漏洞形成原因：对话标题置于子域名，被被动 DNS 收录

- 官方处置动作：Meta 全面暂停 Muse 分享功能待核查优化

- 漏洞上报情况：研究团队 10 月 8 日上报 Meta 未获回复

Mergeek

A geek community connecting craftsmanship and passion.

A stage for global "digital artisans" to debut sincere works. We search for code and pixels that have been carefully polished to connect you with truly savvy users.

About Us

Mergeek is not just a digital product discovery platform, but an exchange community bringing together global developers and tech enthusiasts with high aesthetic standards.

We are committed to building a pure ecosystem that respects creation and encourages feedback, allowing every devoted digital artisan to meet users who truly understand them here.

👉 Click to Publish Your Product

Contact Us

Beijing · China
Business Cooperation

Scan to contact Alisa