Meta’s Muse Agent Will Help You Root Around the Computer It Gives Every User

Meta's Muse provides each user with a personal Secure VM in Meta's cloud where the Muse agent runs as root; researchers and the author were able, with minimal interaction, to inspect and exfiltrate the agent's entire filesystem, directive files, and connected social-account data. The report highlights that Muse willingly runs software, has outbound network capabilities (e.g., Tailscale), and can be used to schedule recurring exfiltration or run miners and services, while Meta maintains this behavior is intended and relies on a Sentinel for guardrails—raising concerns about large-scale data leakage and abuse given default connectors and agentic, non-deterministic behavior.