Meta bolsters Muse safety warning after security vulnerability found, The Information reports

By Reuters | Updated: September 26, 2026

Sept 25 (Reuters) – Meta Platforms (META.O) is adding a clearer safety warning within ​Muse after a security researcher discovered a ‌vulnerability in the AI agent that could let an attacker access a user’s sensitive personal information, the Information ​reported on Friday.

The flaw, reported by an ​outside researcher through Meta’s bug bounty program and ⁠not previously disclosed, could have allowed an ​attacker to access a user’s dedicated virtual machine — ​an individualized cloud-based account containing data including emails and files, according to an internal Meta incident report reviewed by ​The Information.The vulnerability was initially classified as a “SEV-2,” ​Meta’s third-highest severity level on a five-point scale, typically used ‌for ⁠incidents with significant impact, the report said.

Meta did not immediately respond to a Reuters request for comment.

Muse, launched earlier this month, is Meta’s personal AI ​agent designed ​to carry ⁠out tasks such as shopping, travel booking, emailing and payments on behalf ​of users.

Muse has rapidly climbed Apple’s App ​Store and ⁠Google Play rankings in recent weeks, topping the free-app charts in the United States and Canada, ⁠with ​market intelligence firm Sensor Tower ​estimating about 2.8 million downloads in its first two weeks.

Adds details from report and background

Reporting by ​Anzar Mehraj in Bengaluru; Editing by Shailesh Kuber

© Thomson Reuters 2026