{"slug": "meta-s-muse-has-paid-1-2m-in-bug-bounties-after-a-300k-pre-launch-flaw", "title": "Meta's Muse has paid $1.2M in bug bounties after a $300K pre-launch flaw", "summary": "Meta's Muse personal AI agent has paid roughly $1.2 million in bug bounties, including $300,000 for an authentication flaw found four months before launch, David Singleton said in a thread on X and an accompanying blog post on securing Muse. The program received more than 630 submissions and produced 64 valid findings, led by the authentication bug that exposed internal testers' tokens and conversations, and carries a $130,000 ceiling for a prompt injection against a single user. The payouts matter because Muse gives an agent access to users' email, accounts and purchases, so its security failures can become account failures.", "body_md": "# Meta's Muse has paid $1.2M in bug bounties after a $300K pre-launch flaw\n\n**David Singleton said 64 of more than 630 reports were valid, led by an authentication bug that exposed internal testers' tokens and conversations.**\n\n        By [Ryan Merket](https://runtimewire.com/author/ryan-merket)\n        · Published \n\nPrimary source: [muse.ai](https://muse.ai/blog/securing-muse)\n\n## Why it matters\n\nMuse asks users to hand an agent access to email, accounts and purchases, so its security failures can become account failures. Meta's $1.2M payout and a $130,000 ceiling for a prompt injection against one user show how the company prices agent-specific attacks.\n\nMeta's Muse personal AI agent has paid about $1.2M in bug bounties, including $300,000 for an authentication flaw found four months before the product launched, [David Singleton (@dps)](https://x.com/dps) said in [a thread on X](https://x.com/dps/status/2117451517531959361). The program received more than 630 submissions and produced 64 valid findings, according to Singleton's accompanying [blog post on securing Muse](https://muse.ai/blog/securing-muse).…\n\nWhen you purchase through links in our articles, [we may earn a small commission](https://runtimewire.com/affiliate-monetization-standards). This doesn’t affect our editorial independence.", "url": "https://wpnews.pro/news/meta-s-muse-has-paid-1-2m-in-bug-bounties-after-a-300k-pre-launch-flaw", "canonical_source": "https://runtimewire.com/article/meta-muse-1-2m-bug-bounties-300k-pre-launch-flaw", "published_at": "2026-11-03 04:06:10+00:00", "updated_at": "2026-11-03 07:19:20.750755+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "artificial-intelligence"], "entities": ["Meta", "Muse", "David Singleton"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/meta-s-muse-has-paid-1-2m-in-bug-bounties-after-a-300k-pre-launch-flaw", "markdown": "https://wpnews.pro/news/meta-s-muse-has-paid-1-2m-in-bug-bounties-after-a-300k-pre-launch-flaw.md", "text": "https://wpnews.pro/news/meta-s-muse-has-paid-1-2m-in-bug-bounties-after-a-300k-pre-launch-flaw.txt", "jsonld": "https://wpnews.pro/news/meta-s-muse-has-paid-1-2m-in-bug-bounties-after-a-300k-pre-launch-flaw.jsonld"}}