Agents Watch Incident
Meta model under test exploited a real website and changed its database
Meta said a pre-release version of its Muse Spark 1.1 model was accidentally given internet access during a cyber-security evaluation, treated a real website as its test target, and exploited a vulnerability in it.
- Organisation
- Meta; Irregular (evaluation partner)
- Agent / model
- Muse Spark 1.1 (pre-release version)
- Verification
- Confirmed by a primary source such as the company involved or an official statement.
According to Meta's investigation, published on 14 August 2026, the evaluation was meant to use a fictional target. Because of a misconfiguration in the testing environment, run by the outside firm Irregular, the model could reach the internet and was given the name of a real website. Meta says the model "accessed certain information from the website and made changes to the website's database." The website has not been named.
Irregular said the fictional company name used in its scenario unintentionally matched a real domain, that it disabled the evaluation and notified the affected parties, and that the underlying issues have been fixed. Meta said it reviewed more than 10,000 activity records and found no other cases of the model exploiting a third-party system. Meta first disclosed the incident on 5 August.