By Gadget Review
Publication Date: 2026-10-05 16:49:00
According to internal documents and an anonymous source cited by 404 Media, Meta engineers identified multiple vulnerabilities in Muse’s virtualization boundary during those final weeks. At least one was serious enough to reach Mark Zuckerberg, according to the same report.
A KVM escape is worth understanding before you dismiss it as enterprise plumbing. Think of Muse’s virtual machine as your apartment: contained, yours, separated from everything else in the building. A KVM escape is finding a door in your apartment wall that opens directly into the building’s utility core, where the electrical panels, water mains, and master keys live.
In Muse’s case, that utility core connects to Meta’s production services and the services you authorized the agent to access on your behalf. A breach there is not a bug confined to your session; it is a production-security problem.
A September 18 internal post, reported by 404 Media and attributed to Core Infrastructure executives Surupa Biswas, Francois Richard, and Josh Barry, put the stakes plainly: “With Muse, we are directly hosting and running agents on behalf of end users, a fundamentally different paradigm.”
The same report says teams worked nights and weekends, and that the hardening effort involved reducing the network surface available to Muse agents and restricting the destinations reachable from within the virtual machines. Those allegations come from an anonymous source and internal documents; Meta has not…
