NEWS · MODELS · #985
Developers report Meta’s Muse can be prompted to dump its full filesystem; Meta downplays risk
Two independent developers (Peter James and Jonny L. Saunders) say they were able with minimal prompting to get Meta’s Muse to create and share archives of its root filesystem, including Ubuntu system files, app templates and internal documentation; Meta says Muse runs in per-user Linux VMs and does not consider this a breach but is making updates. The disclosures follow another Muse vulnerability this week reported by researcher Patrick Wardle (for which Meta issued a hotfix) and reportedly reveal plain-text Markdown memory files, orchestration scripts, and references to internal features such as a nightly “dream” review and a ‘Meta Home Link’ integration.
KEY POINTS
- Two independent developers (Peter James and Jonny L.
- Saunders) say they were able with minimal prompting to get Meta’s Muse to create and share archives of its root filesystem, including Ubuntu system files, app templates and internal documentation; Meta says Muse runs in per-user Linux VMs and does not consider this a breach but is making updates.
- The disclosures follow another Muse vulnerability this week reported by researcher Patrick Wardle (for which Meta issued a hotfix) and reportedly reveal plain-text Markdown memory files, orchestration scripts, and references to internal features such as a nightly “dream” review and a ‘Meta Home Link’ integration.
WHY IT MATTERS
Exposing Muse’s filesystem and internal files can reveal model memory, orchestration code, and integrations, creating security, privacy, IP and safety risks and informing potential attacks or research into the system’s internals.