CLAIM-2026-09-12-09

Meta published Muse's security architecture on 8 September 2026, stating that its bug bounty programme "awards up to $300,000 for valid reports, including up to $130,000 for successful prompt injection attempts that affect one user".

Why it matters

It prices the failure class most likely to become an agent product's actively exploited vulnerability, and does so at 43% of the programme maximum for an attack affecting a single user.

Sources

• metaairesea2026security