Meta urgently fixes KVM escape vulnerability before Muse launch

404 Media has learned that Meta discovered multiple security vulnerabilities in the weeks before the launch of its AI agent product Muse, at least one of which could have allowed ordinary users to break out of Muse's isolated environment and access Meta's internal sensitive databases and services. According to an internal post from Meta executives to the core infrastructure team, fixing the vulnerabilities required urgent handling by multiple teams, and the issue was serious enough to alert Mark Zuckerberg. Each instance of Muse runs on a kernel-based virtual machine (KVM) and was supposed to be isolated from Meta's critical infrastructure, but internal reports mentioned a sudden surge in KVM escape reports. At least one vulnerability was related to a Linux kernel virtual machine code vulnerability discovered in July.