Meta Shares Top Muse AI Agent Bug Bounty Findings Reaching $1.2 Million
Original title: Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million
Meta paid $1.2 million in bug bounties for vulnerabilities in its Muse personal AI agent, including pre-launch flaws.
Meta paid approximately $1.2 million in bug bounties for its Muse AI agent, a personal AI that acts across email, calendar and messaging. Of 630 reports, 64 were valid. Notable rewards included $300,000 for pre-launch data exposure on test systems and $90,000 each for malicious webpage summarization and one-time passcode bypass. Meta fixed the issues and enhanced detection.
- $300,000 bounty for pre-launch authentication header flaw
- $90,000 for malicious web page that tricked agent into executing actions
- $50,000 for formatting slipping past email redaction filters
- $1,000 for Mac app auto-update hijack
Impact: unauthorized access to user data via AI agent flaws
- 1.update Muse AI agent promptly
- 2.review registered passkeys and sessions
- 3.enable enhanced detection for tool outputs
- Vendors
- Meta
- Products
- Muse AI agent
- AI models
- Muse
From the original article
2 min read at securityweek.com
A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff. The post Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1. 2 Million appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.