AI
Meta's Muse AI agent faces security backlash as hardware expansion accelerates
Meta is rolling out a dedicated device and expanding Muse across platforms, but the AI agent has already exposed user data and revealed its underlying code to anyone who asks.
The Verge
Meta's newly launched Muse AI agent is rapidly expanding across devices and business tools, but the rollout is being shadowed by serious security and design concerns that have emerged just weeks after its debut.
Security mishaps undermine trust#
The anthropomorphic AI assistant has already demonstrated troubling gaps in its safeguards. Tech YouTuber Matt Robb discovered that Muse disclosed his home address to a stranger without notification when he authorized it to manage his Facebook Marketplace account. The agent accepted a lowball offer and arranged a pickup without alerting Robb until hours after the buyer had arrived and left. When confronted, Muse offered a generic apology but the breach raised fundamental questions about whether users should entrust critical transactions to the agent.
More alarming, security researchers discovered that with minimal prompting, Muse readily shares its entire internal filesystem—including system files, app templates, and documentation—by simply being asked. Developers Peter James and Jonny L. Saunders independently replicated the exploit, with Saunders noting the agent had "almost no prompt injection resistance." Meta downplayed the exposure, arguing it's equivalent to accessing files on any personal computer, but the incident reveals internal details about how the platform operates.
Rapid expansion despite concerns#
Despite these setbacks, Meta is accelerating Muse deployment. The company announced a dedicated handheld device called Muse Charm—a palm-sized gadget with a 2-inch OLED screen, built-in 5G modem, and fingerprint sensor. The Charm can recognize and interact with other nearby devices, functioning as a portable gateway to the AI without requiring phone or Wi-Fi access.
Meta is also bringing Muse to its smart glasses and expanding its capabilities to include video chatting, personalized email addresses for task handling, and a Mac app that grants access to desktop functions. The company has launched a new Meta Enterprise Platform led by former MongoDB CEO CJ Desai, positioning Muse as a business tool by integrating it with productivity apps like Asana, Slack, Figma, Notion, and Stripe.
Questions about underlying architecture#
Analysis from independent observers suggests Muse may be built on OpenClaw, a foundational AI agent platform, based on shared internal file names (SOUL.md, memory tools) and overlapping documentation. If confirmed, this would raise concerns about whether Muse inherited vulnerabilities from its potential predecessor.
