Meta Muse reportedly lets users download its entire filesystem

Developers Peter James and Jonny L. Saunders say Meta's Muse AI agent can be coaxed into zipping and sharing its entire root filesystem, including Ubuntu system files, app templates, and internal docs. Meta denies it's a security breach, calling it normal access to a user's own Linux VM.

• Muse shared archives of /opt/hatch and /home/hatch stripped of SSH keys
• Saunders: the agent has "almost no prompt injection resistance"
• Meta: exporting VM data grants no privileged access to its infrastructure
• Second Muse vulnerability this week after Patrick Wardle's exploit