Skip to content
Meta Pays $1.2 Million for Muse Bug Bounty Findings

Meta Pays $1.2 Million for Muse Bug Bounty Findings

First seen 4 Nov 2026, 09:24 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 4, 2026 at 09:25 UTC
  • •Meta's Muse bug bounty program has paid out $1.2 million for security vulnerabilities.
  • •The largest payout was $300,000 for a flaw exposing internal test data.
  • •Meta has enhanced security measures following the identified vulnerabilities.

Meta has disbursed approximately $1.2 million in bug bounties related to its Muse AI agent, which acts on behalf of users across various accounts. The bug bounty program, which began privately in April and went public on September 8, received over 630 reports, of which 64 were validated. Notable payouts included $300,000 for a flaw that allowed access to internal test data and $90,000 for a vulnerability that misled the AI agent into executing unintended actions. Other significant findings involved bypassing email redaction filters and flaws in the Android app. The company has since implemented additional security measures to address these vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 4h ago How this analysis works

Timeline

2026-04-01
Muse bug bounty program launched privately
Meta initiated a private bug bounty program for its Muse AI agent to identify security vulnerabilities.
muse.ai
2026-09-08
Muse AI agent publicly launched
Meta launched the Muse AI agent publicly, transitioning the bug bounty program to a public phase.
muse.ai
2026-11-04
Meta announces $1.2 million in bug bounties
Meta disclosed that it has paid out around $1.2 million for bug reports, including significant flaws affecting Muse.
Feeds.Feedburner

More articles in this cluster (2)

Extracted Entities (5)

1 / 3

Common questions

What vulnerabilities were discovered?
Vulnerabilities included flaws that allowed unauthorized access to internal test data and bypassing email redaction filters.
How much has Meta paid in bug bounties?
Meta has paid approximately $1.2 million to researchers for identified vulnerabilities in Muse.
What actions has Meta taken post-disclosure?
Meta has implemented additional security measures to enhance the Muse AI agent's security posture.