Meta已经重新开启了Muse分享功能。该公司于周二暂停了该功能。此前，《arstechnica》网站询问了一项研究，该研究表明任何人都可以找到其AI代理分享的页面。
Meta has switched Muse sharing back on. It paused the feature on Tuesday. That came after Ars Technica asked about research showing that anyone could find pages shared from its AI agent.
在Meta负责Muse工作的大卫·辛格尔顿（David Singleton）周四在X平台上的一篇帖子中宣布了修复结果。他表示，在一名研究人员公布了该漏洞的细节后，Meta立即禁用了分享功能。他写道，该漏洞仅影响共享的Muse生成物。一些新闻报道曾描述聊天分享中存在漏洞，他表示事实并非如此。关于@Muse共享生成物的更新。
David Singleton, who works on Muse at Meta, announced the fix on Thursday in a post on X. He said Meta disabled sharing immediately after a researcher published details of the flaw. The flaw affected only shared Muse artifacts, he wrote. Some press reports had described a flaw in chat sharing, which he said was not the case. An update on @Muse shared artifacts.
本周早些时候，一名安全研究人员公布了@Muse共享生成物中设计缺陷的细节：一些共享生成物的网址可以通过被动DNS被发现。我们立即禁用了分享功能，以防止任何非预期的暴露，这就是共享生成物暂时不可用的原因。我们在新闻中看到的一些文章提到了聊天分享中的漏洞，事实并非如此——这个问题专门关于共享生成物。底层问题现已修复，分享功能已重新开启。
Earlier this week, a security researcher published details of a design flaw in @Muse shared artifacts: some shared artifact URLs were discoverable via passive DNS. We disabled sharing immediately to prevent any unintended exposure, which is why shared artifacts were temporarily unavailable. Some articles we have seen in the press mentioned a flaw in chat sharing, and that is not the case – this issue was specifically about shared artifacts. The underlying issue is now fixed, and sharing is back on.
如果您在修复前分享了一个生成物：它现在有了一个新网址。任何访问旧链接的人都会看到一条提示，请您向其索取新链接。我们知道这很麻烦，并对造成的干扰表示歉意——但保护用户数据必须放在首位。
If you shared an artifact before the fix: it now has a new URL. Anyone visiting the old link will see a note asking them to get the new one from you. We know that’s a pain, and we’re sorry for the disruption — but protecting user data has to come first.
我们感谢发现并报告此类问题的研究人员。Muse漏洞赏金计划的存在是为了让这些报告能够直接、负责任地送达我们，对于有效的发现，奖励高达30万美元。每一份报告都会被审查。如果您发现了什么，请发送给我们。
We’re grateful to the researchers who find and report issues like this. The Muse bug bounty program exists so these reports can reach us directly and responsibly, with awards of up to $300,000 for valid findings. Every report is reviewed. If you find something, please send it our way.
2026年10月22日 修复前分享的生成物现在有了新的网页地址。任何打开旧链接的人都会看到一条提示，要求他们获取新链接。辛格尔顿感谢了研究人员，并表示Muse的漏洞赏金计划对有效发现的奖励最高可达30万美元。
October 22, 2026 Artifacts shared before the fix now have new web addresses. Anyone who opens an old link sees a note asking them to get the new one. Singleton thanked the researchers and said Muse’s bug bounty programme pays up to $300,000 for valid findings.
一次搜索，6800个页面 Claroc于10月18日发布了这项研究。这是一家安全公司，销售用于追踪公司如何使用SaaS和AI应用程序的工具。它通过对商业被动DNS服务进行单次搜索，找到了超过6800个Muse分享页面。此类服务保留了人们查阅过的网页地址的历史记录。
One search, 6,800 pages Claroc published the research on 18 October. It is a security firm that sells tools to track how companies use SaaS and AI apps. It found more than 6,800 Muse share pages with a single search of a commercial passive DNS service. Such services keep a history of the web addresses people have looked up.
每一个Muse分享都位于同一个Meta域上。每个地址都以分享对话的标题开头，后面跟着一个随机ID。当有人打开链接时，被动DNS服务记录了整个地址，包括随机ID。研究人员随后在没有登录的情况下打开了几百个页面。
Every Muse share sat on the same Meta domain. Each address began with the title of the shared conversation, followed by a random ID. When someone opened a link, passive DNS services logged the whole address, random ID and all. The researchers then opened a few hundred pages without logging in.
Claroc的研究人员写道：“如果你事先问我们，我们会猜测收集这些需要真正的努力。结果只进行了一次查询。”
“If you had asked us beforehand, we would have guessed that gathering these would take real effort. It took one query,” the Claroc researchers wrote.
Claroc表示，大多数页面是无害的。少数则不然。其中包括一份小企业贷款申请和一个工作场所日历，上面显示了数十名员工休假的时间。其他的则包含了一家营销公司为其首席执行官准备的营收审查。一份房地产投资者的报告列出了两个地址和抵押贷款数字。
Most of the pages were harmless, Claroc said. A minority were not. They included a small-business loan application and a workplace calendar showing when dozens of staff would be on holiday. Others held a marketing company’s revenue review for its chief executive. A property investor’s report listed two addresses and mortgage figures.
一个待办事项清单显示了一个银行欺诈警报，带有部分账号。另一个则包含了一名求职者与前沿AI实验室进行机密通话的笔记。他们点出了实验室的联系人并给出了会面时间。
One to-do list showed a bank fraud alert with a partial account number. Another held a job candidate’s notes for a confidential call with a frontier AI lab. They named the lab contact and gave the meeting time.
Meta的回应 Claroc的联合创始人兼首席技术官阿萨夫·阿普罗斯珀（Asaf Aprozper）告诉《arstechnica》，他在10月8日报告了这个问题。他使用了Meta的漏洞赏金计划。他说，他还试图在领英上联系Meta员工，但没有得到回复。
Meta’s response Asaf Aprozper, Claroc’s co-founder and chief technology officer, told Ars Technica he reported the problem on 8 October. He used Meta’s bug bounty programme. He also tried to reach Meta staff on LinkedIn and got no reply, he said.
Meta在给《arstechnica》的一份声明中表示：“人们有能力分享特定的Muse生成物，这会创建一个页面，供拥有链接的人访问。不过，我们已经暂停了此功能，以便我们审查此报告并考虑改变这些链接被发现的方式。”
“People have the ability to share specific Muse artifacts, which creates a page that can be accessed by those with the link. However, we’ve paused this functionality while we review this report and consider changes to how these links can be discovered,” Meta said in a statement to Ars Technica.
Meta于9月推出了Muse，作为一款利用个人账户进行预订、购买和填写的代理。据TechCrunch报道，在周三的第三季度财报电话会议上，马克·扎克伯格表示，已有超过1000万人进行了设置。他说，人们将其连接到电子邮件和日历表明他们信任其安全设置。
Meta launched Muse in September as an agent that books, buys and fills in forms using a person’s accounts. On Wednesday’s third-quarter earnings call, Mark Zuckerberg said more than 10 million people had set it up, TechCrunch reported. He said people connecting it to their email and calendars showed they trusted its security setup.
该代理以前曾引发隐私投诉。今年9月，一名用户表示Muse将他的地址透露给了Marketplace买家。Meta还否认Muse读取了记者的私人消息。《纽约时报》本月报道称，尽管存在风险，扎克伯格仍称Muse已经准备就绪。
The agent has drawn privacy complaints before. In September, a user said Muse gave his address to a Marketplace buyer. Meta also denied that Muse read a journalist’s private messages. Zuckerberg called Muse ready despite the risks, The New York Times reported this month.
Claroc表示，没有证据表明任何人滥用了这些页面。它在10月20日重新检查的40个分享中，没有一个能够打开。但该公司表示，这些带有标题的地址仍然存在于被动DNS历史记录中。
Claroc said it had no evidence that anyone misused the pages. None of the 40 shares it rechecked on 20 October would open. But the addresses, with their titles, are still in passive DNS history, the firm said.