Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million
Meta has paid roughly $1.2 million in bug bounties for its Muse AI agent, including $300,000 for a pre-launch flaw that exposed data on internal test systems.
Muse is a personal AI agent that acts on a user’s behalf across their email, calendar, messaging and other accounts. Each user’s agent gets its own virtual machine.
The bug bounty program ran privately from April and went public at the agent’s September 8 launch, Meta’s David Singleton said in a blog post. Of the more than 630 reports received, 64 were valid.
The $300,000 reward was handed out four months before launch, while Muse was at an early internal testing stage. The researcher demonstrated access to conversations and tokens on pre-release VMs used by Meta staff to test the product.
“An authentication check treated a header added by a local HTTPS proxy as proof that a request came from a trusted...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
