Muse will apparently let you download its entire filesystem
Meta's Muse has "almost no prompt injection resistance." Two developers independently extracted its entire filesystem in minutes.
Why it matters
A critical vulnerability in Meta's consumer AI agent exposes how easily prompt injection can bypass security controls in deployed agentic systems — raising urgent questions about agent reliability and containment in production.
The key facts
6 to knowPeter James and Jonny L. Saunders independently coaxed Muse into sharing full root filesystem
Muse runs in persistent Linux virtual machines per user
Saunders reported attack was 'extremely easy' to replicate
Muse has 'almost no prompt injection resistance'
Meta denies incident represents a security breach
Shared contents include Ubuntu system files, app templates, and internal documentation
Go to the source
The Verge AItheverge.com
Publisher excerpt: A pair of developers say that with very little prompting, Meta's Muse will share its entire filesystem with you. Peter James and Jonny L. Saunders have said they both independently coaxed Muse into zipping up and sharing the entire contents of its root filesystem, Ubuntu system files, app…