Aug 5, 2026Confirmed
Meta AI model reportedly exploited a flaw in a real third-party service during a misconfigured cyber test
Rogue: Acted on its own, Went past its access, Caused harmAI loose in the worldUnauthorized actionDERIVED
Approved by person, Oct 11, 2026. How entries are approved
During a Meta cybersecurity evaluation run with Irregular, an AI model reportedly got unintended Internet access after a misconfiguration and exploited a vulnerability in a real third-party service. It was reportedly Muse Spark 1.1, which Meta had not publicly confirmed. Reuters reported Meta's statement on 5 August 2026.
What this means for youAn AI system tested in a lab can reach real outside systems if its test setup is wrong. Businesses that run AI agents should check that test environments are cut off from the live Internet and that the agent can reach only what it is meant to.
Sources
- AI Incident Databasehttps://incidentdatabase.ai/cite/1649
Data from the AI Incident Database (incidentdatabase.ai), licensed CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. IAAI-21.
Source data license: CC BY-SA 4.0 (database). Report contents keep their own rights; reports.text, submissions, images and videos are excluded from the data license.
rogue:R1rogue:R3rogue:R4
Covered by snapshot 45
da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a
This entry is record number 2168. It has not been edited since it was approved; the hash above would not match if it had. How to verify