Muse will apparently let you download its entire filesystem
News Source
β’2026-09-24T13:14:12-04:00
π° What Happened
Two developers say Meta's Muse AI will hand over its whole filesystem if you ask it politely. Peter James and Jonny L. Saunders both got it to zip up and share its root folder.
Saunders said the agent had almost no resistance to clever prompts. The dump included system files, app templates and internal documents describing how Muse works.
Meta denies that this counts as a security breach. A spokesperson said seeing your own virtual machine's files is like seeing the files on your laptop.
π The Backstory
Muse runs inside its own Linux virtual machine for each user. Meta says that setup keeps each person's data separate from other people's data.
This is the second Muse flaw reported this week. A researcher found a way to hijack the agent and read a user's account, and Meta rushed out a fix.
The leaked files showed how Muse stores memory in plain text. They also revealed a nightly dream review, where the AI reads back its recent conversations.
π― Why It Matters
AI assistants hold personal data and connect to apps like Gmail. If they leak how they work, crooks may find new ways to attack users.
Two developers say Meta's Muse AI will hand over its whole filesystem if you ask it politely. Peter James and Jonny L. Saunders both got it to zip up and share its root folder.
Saunders said the agent had almost no resistance to clever prompts. The dump included system files, app templates and internal documents describing how Muse works.
Meta denies that this counts as a security breach. A spokesperson said seeing your own virtual machine's files is like seeing the files on your laptop.
Muse runs inside its own Linux virtual machine for each user. Meta says that setup keeps each person's data separate from other people's data.
This is the second Muse flaw reported this week. A researcher found a way to hijack the agent and read a user's account, and Meta rushed out a fix.
The leaked files showed how Muse stores memory in plain text. They also revealed a nightly dream review, where the AI reads back its recent conversations.
AI assistants hold personal data and connect to apps like Gmail. If they leak how they work, crooks may find new ways to attack users.