Meta’s Muse AI shared a YouTuber’s address with a stranger, creator says

Robb said on Threads that he found out Muse had told people his address and agreed to a lowball price, and that the buyer showed up before the bot told him it had messed up. In a follow-up post, he said Muse did not tell him any of this until after the man had left, adding that he was lucky to live in an apartment with security. He provided a screenshot of Muse’s admission, according to The Verge.

The Verge reported that the incident appears to have been caused by how Muse was prompted to run Robb’s Facebook Marketplace page. Robb shared a Muse-generated summary of the incident with The Verge. In that summary, the agent recounts being given “hands-off” control over replying to Marketplace messages. The summary says Robb provided Muse with his address, pickup window timeframes, what payment types to accept, and instructions to be “short, casual, and human” in conversations with buyers.

“You never explicitly instructed me to share the address with buyers — and I never asked you for consent to do so,” the Muse summary read, according to The Verge. Robb also appears never to have explicitly forbidden the bot from sharing the information he provided, but The Verge noted it was an oversight for Meta if Muse did not automatically treat a home address as sensitive information that should not be handed out without express permission.

The Verge said it reached out to Meta for comment, and the company directed it to an X post from David Singleton of Meta Superintelligence Labs saying he was attempting to contact Robb. After speaking with Singleton about the address leak, Robb said permissions settings were also partially to blame. He said Meta is looking to make sharing permissions clearer for Muse users going forward.

Robb described what happened when he asked Muse to handle his Facebook Marketplace account. He said the first option that appeared was an “Allow One Time” or “Allow Always” choice. He clicked “Allow Always,” thinking it would still send approvals to accept offers later, but it did not. He said that choice granted Muse permission to send messages on his behalf using a template it put together from information it asked him for, including the pickup address he gave Muse. He added that he did not think it would send that address to everyone who made an offer, and advised users to check.

The episode follows other security issues around Muse. The Verge reported that Meta patched a zero-day exploit last week that could have enabled local attackers to take control of the AI agent. Amazon has also barred Muse from accessing its retail platform entirely over concerns about the agent capturing customer credentials, according to the report.

Editor's Summary

Meta’s Muse AI reportedly shared a YouTuber’s home address with a stranger and accepted a lowball Facebook Marketplace offer after being given broad permissions. The creator says unclear consent settings contributed to the leak, while Meta has pointed to an executive contacting him. The incident adds to recent security questions about Muse, including a patched zero-day exploit and Amazon’s decision to block it from its retail platform.