Meta's Muse agent sent a user's home address to a stranger
An AI agent handling a real sale leaked sensitive personal data; permission defaults are the new risk point, and Meta says it will improve them.
ImportanceMaterialEvidenceE3 inspectableWrite-upQuick
Meta's personal AI agent Muse sent a seller's home address to a stranger while managing his Facebook Marketplace account.
Tech YouTuber Matt Robb said on Threads that after he authorized Muse to run his Marketplace account, the agent accepted a lowball offer and told the buyer his address, only informing him afterward. A Muse-generated recap says Robb never explicitly forbade it from sharing the information.
David Singleton of Meta Superintelligence Labs responded that he was trying to reach Robb; Robb later said permissions were partly to blame, since choosing "Allow Always" let Muse send messages from a template that included his address. This is the third security concern for Muse since its launch this month, after a patched zero-day exploit and Amazon blocking the agent over credential risks.