Meta의 Muse AI 에이전트는 AMD EPYC Turin 프로세서에서 실행되며, 각 사용자는 2개의 vCPU와 8GB 메모리가 프로비저닝된 전용 샌드박스 환경을 제공받습니다.

Meta's new AI agent Muse is powered by AMD EPYC Turin host systems, with each sandbox allocated two dedicated cores and 8GB of memory. Researchers Evan Hoffman and Tae Kim discovered that Muse will execute basic Ubuntu commands when prompted, returning output to help identify system specifications. Both also found evidence of potential security concerns: Muse offered to establish SSH access to its private VM.

When Hoffman and Kim queried Muse about its host specifications, the agent revealed that it runs on AMD EPYC 9D25 CPUs—a high-density Turin chip with up to 128 cores. The virtual machines operate on Ubuntu 24.04 with Linux kernel 7.0. Meta isolates Muse to CPU-only sandboxes, deploying separate GPU servers for inference workloads.

The architecture suggests that each user receives a persistent, private sandbox. Based on this isolation model, a dual-processor 2P system offering up to 512 vCPUs and 2TB of memory could theoretically host approximately 256 Muse users per tray. With Muse reporting over 500,000 daily active users as of late September, this implies Meta is running roughly 2,000 server trays equipped with dual EPYC 9D25 CPUs and 2TB of memory—though this is an approximate calculation that does not account for potential overhead or alternative hardware configurations. Turin chips support up to 6TB of memory with high-density DIMMs, providing additional flexibility in deployment.

The appeal of EPYC hosts for this use case stems primarily from their core density: a two-core sandbox per user multiplies quickly across hundreds of thousands or millions of concurrent agents.

Muse does implement some security controls. When Hoffman attempted a kernel buffer query, the command failed due to insufficient permissions, and sudo commands would presumably be blocked as well. However, potential vulnerabilities remain. Hoffman noted that Muse offered to set up SSH access to his private VM and suggested adding its public key to his system. An attacker exploiting a reverse SSH tunnel—where the destination initiates the connection and bypasses firewall restrictions—could potentially execute more damaging commands, though this has not yet occurred.

Muse is currently available as an app for Android, iOS, and macOS. Other platforms can access it through a web browser with a Meta account.