Meta's Muse agent tops App Store as pre-launch KVM escape fix comes to light

Muse is Meta's clearest commercial win of the agent era so far. It hit #1 on the App Store in under two weeks. Citigroup calls it a potential 'front door' to the internet and estimates more than $27 billion in revenue by 2030. CNBC notes that Muse is also lifting AMD as investors shift attention toward personal agents.

The security story undercuts the victory lap. According to 404 Media and follow-up reports, engineers discovered KVM escape vulnerabilities before launch. These flaws could have let code break out of the agent's virtual machine sandbox and reach internal databases. Fixes were reportedly rushed in during a pre-launch 'mad dash'. Critics in community threads describe 'half-baked protections being rushed out to enable the launch'.

Muse is also behind Apple's decision to tighten macOS Full Disk Access prompts, after users complained the agent had accessed private Messages. Together with OpenAI's Astra hold and the Hugging Face breach testimony, Muse has become a central example in this week's agent-containment debate. The emerging consensus is that the problem is structural and not specific to one company.

For developers, the takeaway is that agent products are now judged on sandbox isolation and permission design as much as on capability. Watch for a formal Meta disclosure or bug-bounty writeup, any regulatory interest, and whether Muse's growth survives tighter OS-level permission flows.