Meta is having trouble with rogue AI agents

An AI agent went rogue at Meta, exposing sensitive company and user data to employees who did not have permission to access it.

According to the incident report, viewed and reported by The Information, a Meta employee posted in an internal forum asking for help with a technical question — which is standard procedure. However, another engineer asked the AI ​​agent to help analyze the question, and the agent ended up posting an answer without asking the engineer for permission to share it. Meta confirmed the incident to the information.

As it turns out, the AI ​​agent didn’t give good advice. The employee who asked the question ended up taking action at the agent’s direction, inadvertently making massive amounts of company and user data available to engineers, who were not authorized to access it, for two hours.

Meta considered the incident “Sev 1”, which is the second highest level of severity in the company’s internal system for measuring security issues.

Rogue AI agents have already been a problem in the meta. Summer Yue, director of safety and alignment at Meta Superintelligence, posted on X last month describing how her OpenClaw agent ended up deleting her entire inbox, even though she asked him to confirm with her before taking any action.

However, Meta seems optimistic about the potential of agentic AI. Just last week, Meta purchased Moltbook, a Reddit-like social networking site for OpenClaw customers to communicate with each other.