Meta Muse exposed privacy and security vulnerabilities

1. 14:12
   网页cnBeta· Discussion

   Meta AI agent Muse changed passwords and read text messages on its own—why did Zuckerberg still insist on launching it?(opens the original post in a new tab)

1. 17:03
   网页The New York Times · Technology· Discussion

   Inside Mark Zuckerberg’s Decision to Pull the Trigger on Meta’s A.I. Agent(opens the original post in a new tab)
2. 14:02
   XX @rohanpaul_ai· Discussion

   Alexandr Wang (Chief AI Officer at Meta) explains how each Muse runs inside its own "secure VM", a sandboxed, isolated mini computer, and...(opens the original post in a new tab)
3. 07:21
   网页IT之家· Discussion

   Meta's chief AI officer Wang Tao: don't expect Muse to automatically earn you $10,000(opens the original post in a new tab)

1. 22:00
   网页South China Morning Post · Tech· Discussion

   Can China match up with Meta’s Muse in race to harness AI agents?(opens the original post in a new tab)

1. 10:01
   X @MinLiBuilds

   Meta Muse hit by root access and KVM escape vulnerabilities before and after launch

   A user claims to have obtained root access in Meta's Muse. 12 days before the product launched, Meta had just patched a KVM escape vulnerability overnight; after launch, a new zero-day was exposed, and a bug was found, indicating that many problems still remain.

1. 18:36
   公众号Doonsec· Discussion

   Meta open-sources Muse personal desktop AI agent hardware, compatible with Espressif ESP32 and Raspberry Pi, can handle email, online shopping, trip planning, sensor data collection, and smart home control(opens the original post in a new tab)
2. 17:33
   Business Insider

   Some early users delete or restrict Instinct and Meta Muse personal AI agents over privacy concerns

   Four early users interviewed by Business Insider said they have deleted or restricted their use of Instinct and Meta's Muse due to concerns about the sensitive data and account access permissions required by personal AI agents. Some users said the agent read Gmail one-time login codes without asking, confabulated personal information from documents that were never sent, and others encountered login prompts for carrier accounts that appeared to come from an Iranian IP. Meta said Muse has first-of-its-kind privacy, security, and safety protections, and users can choose which apps to connect and revoke or delete data at any time; Instinct did not respond to requests for comment. Meanwhile, Muse topped the App Store a week after launch, reportedly with over 3 million weekly active users and over 1 million daily active users, and Instinct said it is growing about 10% daily with an annualized transaction volume exceeding $1 billion. Some users said they would still use the agent but would no longer grant it sensitive permissions like email access.

3. Time not given
   time.com

   Meta's Muse AI agent is building a profile for you

   Meta's Muse AI agent is building personal profiles for users. On September 24, 2026, promotional ads for the agent appeared on a digital billboard in Oakland, California.

4. 05:35
   Mashable SEA

   Wired and researchers say Meta's Muse builds profile pages for every contact

   According to reports from Wired and independent AI safety researcher Karan Joshi, Meta's AI assistant Muse is alleged to have been instructed to create pages for every person in the user's life, aggregating information from messages, photos, and memories of past interactions, and tracking the user's relationship with the person, address, preferences, birthday, and things owed or promised. Researchers at FutureSociety said a background loop called Relationships runs every hour on the user's computer and updates these pages, and Muse can also plan how to strengthen the user's relationship with someone based on this. Joshi said he got Muse to reveal the system prompt, and Mashable said it could not independently verify these system instructions. Meta spokesperson Daniel Roberts responded that Muse collects relationship context based on permissions explicitly granted by the user, from public information and content the user chooses to share.

1. 23:38
   404 Media

   Meta urgently fixes KVM escape vulnerability before Muse launch

   404 Media has learned that Meta discovered multiple security vulnerabilities in the weeks before the launch of its AI agent product Muse, at least one of which could have allowed ordinary users to break out of Muse's isolated environment and access Meta's internal sensitive databases and services. According to an internal post from Meta executives to the core infrastructure team, fixing the vulnerabilities required urgent handling by multiple teams, and the issue was serious enough to alert Mark Zuckerberg. Each instance of Muse runs on a kernel-based virtual machine (KVM) and was supposed to be isolated from Meta's critical infrastructure, but internal reports mentioned a sudden surge in KVM escape reports. At least one vulnerability was related to a Linux kernel virtual machine code vulnerability discovered in July.

2. 22:13
   404 MediaSelected

   Meta urgently fixes VM escape vulnerability before Muse release

   404 Media reports that Meta discovered multiple security vulnerabilities weeks before the release of its AI agent product Muse, at least one of which could have allowed ordinary Muse users to break out of virtual machine isolation and access Meta's internal sensitive databases and services. Internal documents show the issue was serious enough to be escalated to Mark Zuckerberg, with multiple security teams working around the clock before launch to fix it, and internally there was a surge in reports of KVM escapes. In an internal post on September 18, Meta's Vice President of Core Infrastructure Surupa Biswas and others said that Muse's approach of hosting and running agents directly on the end-user side is a new paradigm, and that teams had been hardening the service since August 27, reducing the attack surface of the Hatch agent and restricting ports and IP targets. A Meta source said some fixes were hastily shipped half-baked protections to avoid delaying the launch, and expressed concern that Hatch could lead to a massive data breach. A Meta spokesperson responded that Muse is the first personal AI agent for everyone, and that security has been strengthened through internal testing, agent red teaming, and a bug bounty program.

3. 09:08
   网页IT之家· Discussion

   Meta's AI assistant Muse has been reported to be able to deeply analyze users' social relationships and create personal profiles for each contact.(opens the original post in a new tab)
4. 03:30
   网页Techmeme· Discussion

   Extracted system prompts show Meta's Muse compiles "a page for every person in the user's life", with facts, history, tips to improve relationships, and more (Wired)(opens the original post in a new tab)

1. 14:37
   RedditReddit r/LocalLLaMA· Discussion

   Reddit discusses family authorization, tool safety, and screenshots lacking context in Muse prompt disclosure(opens the original post in a new tab)
2. 02:23
   Hacker NewsHacker News· Discussion

   What Meta got right with Muse(opens the original post in a new tab)

1. 20:00
   WIRED Security and AI

   Researchers extract Meta assistant Muse's internal instructions, revealing it creates profiles for each contact

   Meta's new personal assistant Muse has been downloaded millions of times, and users have connected it to their bank accounts, messages, and health data. Independent AI safety and security researcher Karan Joshi, through an ordinary chat interface, got Muse to copy and share its own software files, extracting a large set of instructions and system prompts, which he shared with WIRED. One instruction requires Muse to build a page for every person in the user's life each hour, aggregating data on family, partners, friends, colleagues, collaborators, and followed accounts; pages may include sections such as Facts, History, The relationship, In common, Open threads, and Strengthening, and record dates such as birthdays and anniversaries. The instruction says Muse should use only existing evidence, and that making up details is worse than leaving a page blank. Meta says these files were already accessible as a matter of transparency, and says Muse gives each user a separate virtual machine to store data, users can clear memory or disconnect external services at any time, it seeks human confirmation before performing actions such as sending email or shopping, and it provides audit logs.

2. 07:03
   网页IT之家· Discussion

   After downloading and trying Muse, I sold all my Airbnb stock and increased my Meta position(opens the original post in a new tab)

1. 21:38
   网页IT之家· Discussion

   Meta's AI agent Muse will arrive on smart glasses platforms, able to complete various tasks on behalf of users(opens the original post in a new tab)
2. 17:47
   网页TechRadar· Discussion

   Meta Muse has already broken a record: it beats all competitors in data collection, Surfshark warns(opens the original post in a new tab)

1. Date not given
   Future SocietySelected

   Future Society analyzes Meta Muse sandbox: model can be induced to hand over the root filesystem

   The Future Society analyzed the privacy and security design of Muse, including user profiling, memory deletion, and cross-user learning, based on a copy of the Muse virtual machine files obtained by developers on September 24, 2026. This page lists file citations and the authors' analysis separately. The page also relays Meta's response: since each virtual machine is isolated from its owning user, exporting is considered by Meta to be expected behavior rather than a data leak. The materials cannot directly prove that other users' data can also be accessed.

Current attention58·Peak in the comparable period70（Oct 7 12:00）·Change over the comparable past 24 hours -1%