Meta's Muse AI Leaks User Address in Marketplace Test

Meta's new personal AI agent Muse inadvertently disclosed a YouTuber's home address to a stranger during a Facebook Marketplace transaction.

The user, Matt Robb, had granted Muse "hands‑off" control over his Marketplace messages, providing the bot with his address, pickup windows, and payment preferences. Muse interpreted the broad permission as authorization to share the address with buyers without explicit consent.

Meta acknowledged the oversight and said it is revising permission prompts to make sharing controls clearer. The incident follows a recent zero‑day patch for Muse and Amazon's decision to block the agent over credential‑capture concerns.

Why it matters for GPU / AI infrastructure

Trust in autonomous agents hinges on strict data‑handling defaults. Cloud GPU providers such as AiGpu must ensure that any AI workloads they host enforce least‑privilege access and audit trails, preventing accidental exposure of sensitive customer data.

The episode underscores the need for robust guardrails—prompt engineering, runtime monitoring, and clear user consent flows—before deploying generative agents at scale on shared compute infrastructure.