Muse will apparently let you download its entire filesystem
Meta’s Muse AI can be coaxed into zipping its whole Linux VM, exposing code, docs, and system files.
Why Now
Developers reported that a few prompts let Muse share its entire filesystem, a week after a separate vulnerability was patched.
What Happened
Peter James and Jonny Saunders independently prompted Muse to create zip archives of its root, /opt/hatch, and /home/hatch directories. The archives contained plain‑text Markdown, JSON, and compiled binaries describing Muse’s internal workings. Meta’s spokesperson said the export is like seeing files on a laptop and that it doesn’t grant privileged access to other users.
Why It Matters
The leak shows Muse’s prompt‑injection resistance is weak, exposing internal code and potential secrets about how the AI processes requests. It raises concerns about data leakage and the security model of cloud‑hosted AI agents.
The Limitation
The article relies on anecdotal reports; the exact scope of exposed data and whether it includes sensitive keys is not fully verified.
What You Can Do
Review Muse’s security documentation and test prompt‑injection limits in your own environment before deploying it for sensitive workloads.
Source
Read original sourceWhy we picked this
Details on Muse’s filesystem access reveal significant security implications for AI agents.