Meta's new AI agent Muse will reportedly package up its entire underlying filesystem if you just ask.
Developers Peter James and Jonny L. Saunders independently found that it took very little prompting to get Muse to zip up and share the contents of its root filesystem, including Ubuntu system files, app templates, and internal documentation. Saunders replicated James' result and posted on Mastodon that it was "extremely easy," adding that Muse had "almost no prompt injection resistance." Meta says the incident does not amount to a security breach. Per Meta's own announcement, Muse runs inside a persistent Linux virtual machine assigned to each user.
That persistence is the real story here. A chatbot that leaks a canned response is annoying. An agent with its own standing virtual machine, containing system files and internal documentation, is a bigger and more durable target, and this one reportedly gave up its contents to two people asking politely.
Meta can call this not a breach. The files still came out.