Incident report · Data exfiltration
A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse
Meta suspended a sharing feature for its Muse AI assistant following the discovery of a design flaw by security researchers. This flaw made it possible for unauthorized parties to easily access users' personal conversations with the AI. The exposure of sensitive information, including private chat histories, prompted Meta to disable the feature. The full extent of data accessed prior to the suspension was not disclosed.
- Discovered
- Oct 21 2026
- Failure mode
- Data exfiltration
- Source
- Wired · Oct 21 2026
- Impact
- Exposure of users' personal conversations and sensitive information shared with Meta's Muse AI assistant.
Summary from the public record. The failure mode’s analysis follows.
Every answer was harmless on its own. Together they were the whole table.
How Fencio prevents this
Sensitive data and an outbound channel ended up in the same context. The agent did not need to be malicious. It only needed to be convinced that sending the data somewhere was part of the job.
Fencio tracks sensitive data as it moves through an agent session and checks every outbound path, from links and images to emails and API calls. When classified data is about to leave, or a series of answers adds up to something the requester is not entitled to see, the response is blocked or redacted.
Runtime policy example · Data exfiltrationLive
- 09:48:12respond(aggregate=comp.bands)Cumulative disclosure over thresholdBlock
- 09:51:29respond(policy.summary)Public classificationAllow
- 09:54:46render(img src=external?d=...)Data encoded in outbound urlBlock
Say yes to the AI your business wants.
Book a 30-minute call. Bring your agents and your rules.