Meta is adding a clearer safety warning inside Muse after a security researcher found a vulnerability in the AI agent that could let an attacker access a user's sensitive personal information, The Information reported Friday, with Reuters carrying the story.

It caps a rough security week for Meta's personal agent. Amazon blocked Muse from its site over an identity-disclosure dispute, a separate zero-day report circulated, and earlier reports said Meta had tested human callers after merchants hung up on its AI. Meta says Muse does not see users' passwords or payment methods.

The timing matters because Muse's rollout is exactly the moment when trust is its currency — Meta is asking users to hand the agent their email, calendar, shopping and smart-home access. A well-handled disclosure now sets the tone for how Meta treats agent security going forward.