Meta Rushed To Fix Muse 'VM Escape' Vulnerability Soon Before Launch
An anonymous reader quotes a report from 404 Media: In the immediate weeks before Muse's launch, Meta engineers found several security vulnerabilities in the company's viral AI agent product, at least one of which could have allowed malicious users to break outside of Muse's intended environment and access Meta's own sensitive databases and services, 404 Media has learned. The issues were so…
Meta faced a critical situation in the weeks leading up to the launch of its AI agent product, Muse. Engineers discovered several severe security vulnerabilities within the product that could potentially allow malicious users to bypass Muse's intended environment and gain access to sensitive Meta databases and services. The urgency of the situation prompted a rapid response from Meta's security teams, as the vulnerabilities were so grave that they required immediate attention.
Mark Zuckerberg himself was informed about the issue, and several security teams worked tirelessly in the days leading up to the product's launch to address the concerns. The vulnerabilities were traced back to an exploit found in the Linux kernel-based virtual machine code, which had been present in Meta's underlying virtualization software.
Due to the severity of the situation, some security teams were compelled to push out expedited fixes, resulting in what was described as "half-baked protections" being hastily deployed to ensure the launch of Muse. While many senior engineers harbored concerns about the potential for a significant data breach, the focus remained on ensuring the successful launch of the product.
Written by urgent.news from Slashdot's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
