Meta adds a Muse safety warning after a flaw exposed users' cloud machines, as downloads pass 3.4 million
The agent also turned out to zip up its own filesystem for curious users, while app trackers disagree widely on install counts.
Meta is adding a clearer safety warning inside Muse, its personal AI agent, after an outside researcher reported a vulnerability through its bug bounty program, Reuters reports, citing The Information. According to an internal incident report, the flaw could have let an attacker reach a user's dedicated virtual machine, a cloud account holding data including emails and files. Meta initially rated it SEV-2, its third-highest level on a five-point scale, and did not immediately comment. Separately, The Verge reports that Muse will expose and zip up its entire filesystem for users who ask, revealing internal details that Muse itself had said were not meant to be seen. The issues come as the app grows quickly after Meta promoted it at Connect. Sensor Tower estimates more than 3.4 million downloads since the September 8 launch, up from 2.5 million at the start of the week; Apptopia puts the total at 4.3 million and Appfigures at about 2.3 million. Muse, available only in the US and Canada, handles shopping, travel, email and payments for users, so weaknesses in its isolation affect a fast-growing base of people who have handed it sensitive accounts.