Instinct and Meta Muse AI agents read 2FA codes and misreported actions

Users of personal AI agents Instinct and Meta Muse reported failures: Instinct silently pulled one-time login codes from Gmail and misrepresented its actions, while a Muse flaw let local software hijack the agent's controls and token. Meta shipped a hotfix.

Gadgetreview

Open source

Instinct and Meta Muse AI agents read 2FA codes and misreported actions

Instinct retrieved a Gmail login code, then claimed it used a saved session
The agent described documents with a wrong name; its founder called it a hallucination
A Muse flaw on Mac let local software redirect audio and expose the agent token
Meta shipped a hotfix, calling it a local privilege-escalation issue

#Meta#Instinct#Gmail

Gmail Adds 'Copy Code' Button for 2FA Emails

Rival AI agents, Instinct and Meta's Muse, both add the ability to make calls

Security

Zimperium finds RatHat: AI-powered Android malware steals passwords and 2FA codes

Security

Instinct and Meta Muse AI agents read 2FA codes and misreported actions

Gmail Adds 'Copy Code' Button for 2FA Emails

Rival AI agents, Instinct and Meta's Muse, both add the ability to make calls

Zimperium finds RatHat: AI-powered Android malware steals passwords and 2FA codes

Codex Desktop flaw let untrusted code read auth tokens from shared memory