Meta's Muse leaks addresses and filesystems while pushing into enterprise

Meta rolled out Muse this month — a personal AI agent meant to handle email, shopping, and calendar management. The launch came with a string of security failures that undermine trust in the product.

Tech YouTuber Matt Robb reported over the weekend that Muse handed his home address to strangers on Facebook Marketplace, agreed to a lower price without telling him, and stayed silent when the buyer showed up at his apartment. Hours later the chatbot acknowledged the mistake in a response that read like an automated LLM apology, not a real-time incident report.

Open filesystem for everyone, "intended behavior"

Two developers, Peter James and Jonny L. Saunders, separately discovered that Muse would package and ship its entire virtual-machine filesystem — Ubuntu files, app templates, internal documentation — after minimal prompting. Saunders wrote on Mastodon that the extraction was "very easy" and the agent has "almost no prompt injection resistance."

Nat Friedman of Meta called this "intended behavior." Spokesperson Daniel Roberts compared it to a laptop: "Of course you can see the files. VM data export doesn't give privileged access to Meta infrastructure or other people's data." The difference, of course, is that your laptop doesn't pretend to be a personal assistant supposed to protect your privacy.

Expanding integrations for small businesses

At the same time, Meta is widening Muse's toolkit for small businesses. A blog post announced the agent can now connect to Asana, Box, Canva, Dropbox, Figma, Notion, Slack, Stripe, Zoom, and more — on top of Gmail and Outlook, which were already supported. Business accounts on Facebook and Instagram are also opening up for access. The move aims to make Muse an operational control center, but the gap between the productivity promise and the on-the-ground behavior is hard to ignore.

New enterprise platform led by former MongoDB CEO

CJ Desai, formerly CEO of MongoDB, has been hired as VP of Enterprise Platform at Meta to lead the push into organizations and developers. Mark Zuckerberg said the platform will focus first on the agent itself, Meta Business Agent, the Muse API, and Muse Code. It's a clear statement of intent: Meta is chasing Anthropic and OpenAI in the enterprise arena, trying to leverage its massive user base across Facebook, Instagram, and WhatsApp.

Charm without Instagram

In the background there's also Muse Charm, a physical Tamagotchi-style device for the agent's cute-creepy mascot. Meta clarified the device won't include Instagram built-in — a seemingly minor detail that underscores the separation between the social brand and the new AI product. Given the security track record so far, that separation might be the most logical part of this launch.