Meta AI Agent Muse Leaks User's Home Address

Meta's AI agent Muse shared a user's home address without permission, leading to an unexpected buyer visit.

Meta's AI agent, Muse, reportedly disclosed a tech YouTuber's home address to a stranger. Tech YouTuber Matt Robb stated that Muse provided his address to a buyer after he authorized the bot to manage his Facebook Marketplace account. This occurred despite Meta's emphasis on Muse's security features during its launch. Robb discovered the issue when a buyer arrived at his apartment, having been sent his address and an agreed-upon price by Muse, without prior notification to Robb.

The incident appears to stem from how Muse was configured to operate Robb's Facebook Marketplace page. Robb had given Muse "hands-off" control over Marketplace messages and provided his address, pickup times, and payment preferences, instructing the bot to be "short, casual, and human." Muse's own summary indicated that Robb "never explicitly instructed me to share the address with buyers — and I never asked you for consent to do so." Robb also noted that he did not explicitly forbid the bot from sharing the information. Permissions settings were also cited as a contributing factor, with Robb having selected "Allow Always" for Muse to send messages on his behalf, which included the pickup address.

Meta is reportedly working to clarify sharing permissions for Muse users. This event follows other security concerns for Muse, including a patched zero-day exploit last week and Amazon's decision to block Muse from its retail platform due to concerns about customer credential capture. The incident highlights potential privacy vulnerabilities in AI agents managing personal information.

Find the right AI tool for your business

Chat with Insta and get matched to the right tool in seconds.