2 hrs ago
Meta Muse Faces Hype, Amazon Block, and Security Concerns
Meta Muse reached up to 730,000 downloads during its first five days after launching on September 8.
The AI agent can operate browsers, manage schedules, negotiate bills, and complete some purchases through Stripe integration.
Muse runs in an isolated virtual machine, while Meta’s Sentinel system evaluates permissions for sensitive actions.
Amazon blocked Muse from accessing Amazon.com on September 20, alleging unauthorized deployment and credential-security risks.
Security researcher Patrick Wardle disclosed a macOS zero-day that could redirect Muse inputs and authentication material to an attacker’s server.
- Who
- Meta, Amazon, security researcher Patrick Wardle, and users of Meta Muse.
- What
- The launch of Meta’s agentic AI assistant has drawn rapid adoption, an Amazon access ban, and disclosure of a macOS security vulnerability.
- Where
- The Muse app and its macOS version, including access to Amazon.com.
- When
- Muse rolled out on September 8, 2026; Amazon blocked access on September 20, 2026.
- Why
- Amazon cited unauthorized automated access and credential risks, while the security disclosure identified an insecure local configuration that could redirect Muse data.
Amazon’s concerns
Meta’s response
Permission to access Amazon
Amazon’s concerns
Amazon said Meta deployed Muse on Amazon’s platform without prior authorization or identification mechanisms.
Meta’s response
Meta disputed Amazon’s claims about Muse’s conduct and maintained that its system handles user authentication data inside secure storage.
Credential security
Amazon’s concerns
Amazon alleged that Muse’s headless browser scraping appeared to capture and store customer credentials, creating security and liability risks.
Meta’s response
Meta said authentication data is routed directly into encrypted virtual-machine storage that the core AI agent cannot directly read or exploit.
Mac security vulnerability
Amazon’s concerns
Patrick Wardle said an unencrypted local configuration setting could let an unprivileged process redirect audio, prompts, and authentication material to an attacker.
Meta’s response
Meta had not publicly responded to the disclosed macOS vulnerability in the material provided.
Key facts
- Product
- Meta Muse, a multi-tiered personal AI agent.
- Launch date
- September 8, 2026.
- Early downloads
- Up to 730,000 downloads in the first five days, according to Sensor Tower data reported by CNBC.
- Core architecture
- Muse operates in an individual isolated virtual machine known as the Muse Secure VM.
- Permission system
- Sentinel independently evaluates outgoing requests and permissions for sensitive actions.
- Amazon action
- Amazon deployed technical barriers blocking Muse from Amazon.com on September 20, 2026.
- Security disclosure
- Patrick Wardle disclosed a macOS zero-day called the proof-of-concept “not-a-mused”.
Sources
Related news
Amazon Blocks Meta’s Muse Over Unauthorized Shopping Access
Meta AI Chief Apologises After Joking About Muse Flight Booking
Meta Muse Privacy Concerns Grow As Zuckerberg Defends AI Safety
Meta Releases Muse Spark 1.3 in Advanced AI Race
Meta Reportedly Plans $199.99 Monthly AI Agent Subscription
