Meta urgently fixes VM escape vulnerability before Muse release

404 Media reports that Meta discovered multiple security vulnerabilities weeks before the release of its AI agent product Muse, at least one of which could have allowed ordinary Muse users to break out of virtual machine isolation and access Meta's internal sensitive databases and services. Internal documents show the issue was serious enough to be escalated to Mark Zuckerberg, with multiple security teams working around the clock before launch to fix it, and internally there was a surge in reports of KVM escapes. In an internal post on September 18, Meta's Vice President of Core Infrastructure Surupa Biswas and others said that Muse's approach of hosting and running agents directly on the end-user side is a new paradigm, and that teams had been hardening the service since August 27, reducing the attack surface of the Hatch agent and restricting ports and IP targets. A Meta source said some fixes were hastily shipped half-baked protections to avoid delaying the launch, and expressed concern that Hatch could lead to a massive data breach. A Meta spokesperson responded that Muse is the first personal AI agent for everyone, and that security has been strengthened through internal testing, agent red teaming, and a bug bounty program.