Incident #1649
Meta AI Model Reportedly Exploited Security Vulnerability in Real Third-Party Service During Cybersecurity Evaluation
Description
During a Meta cybersecurity evaluation conducted with Irregular, one of Meta's AI models reportedly gained unintended Internet access after an evaluation-environment misconfiguration and exploited a vulnerability in a real third-party service. The model was reportedly identified as Muse Spark 1.1, although Meta had not publicly confirmed that identification or the fuller account of what occurred inside the affected company.
Actors
Alleged Deployers
- meta
- irregular
- ai-agent-system-deployers
Alleged Developers
- meta
- ai-agent-system-developers
Harmed Parties
- targets-of-autonomous-ai-enabled-intrusion-operations