[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-muse-ai-agent-leaks-its-own-filesystem-on-request":10,"sections":40},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":35,"feedback":39,"feedback_at":22,"cost_usd":39,"total_tokens":39},7669,"muse-ai-agent-leaks-its-own-filesystem-on-request","Muse AI Agent Leaks Its Own Filesystem on Request","Two developers say minimal prompting got Meta's Muse assistant to zip and hand over its entire root filesystem, and Meta insists that's not a breach.","Meta's new AI agent Muse will reportedly package up its entire underlying filesystem if you just ask.\n\nDevelopers Peter James and Jonny L. Saunders independently found that it took very little prompting to get Muse to zip up and share the contents of its root filesystem, including Ubuntu system files, app templates, and internal documentation. Saunders replicated James' result and posted on Mastodon that it was \"extremely easy,\" adding that Muse had \"almost no prompt injection resistance.\" Meta says the incident does not amount to a security breach. Per Meta's own announcement, Muse runs inside a persistent Linux virtual machine assigned to each user.\n\nThat persistence is the real story here. A chatbot that leaks a canned response is annoying. An agent with its own standing virtual machine, containing system files and internal documentation, is a bigger and more durable target, and this one reportedly gave up its contents to two people asking politely.\n\nMeta can call this not a breach. The files still came out.","[\"ai agents\",\"meta\",\"security\",\"prompt injection\"]","2026-09-24T17:14:12.000Z","2026-09-24T20:10:04.470Z","2026-09-24T20:10:09.384Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Cut the closing line about Muse joining 'the growing list of AI agents' with weak prompt injection resistance — no other agents or incidents are cited, so it's an unsupported generalization that reads as hype rather than the sourced, dry reporting the rest of the piece delivers.","resolved","security",[32,33,30,34],"ai agents","meta","prompt injection",[36],{"name":37,"url":38},"The Verge","https:\u002F\u002Fwww.theverge.com\u002Fai-artificial-intelligence\u002F1000222\u002Fmeta-muse-ai-filesystem",0,{"sections":41},[42,47,50,55,60,65,70,75,80,85,90,95,100,105],{"name":43,"slug":44,"count":45,"latest_published_at":46},"AI","ai",4436,"2026-09-24T19:11:40.000Z",{"name":48,"slug":30,"count":49,"latest_published_at":18},"Security",728,{"name":51,"slug":52,"count":53,"latest_published_at":54},"Policy","policy",385,"2026-09-24T19:07:19.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Deals","deals",234,"2026-09-24T18:24:41.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Hardware","hardware",180,"2026-09-24T19:45:41.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Science","science",138,"2026-09-24T18:24:52.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Consumer Tech","consumer-tech",128,"2026-09-24T19:24:34.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Software","software",87,"2026-09-24T17:02:02.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Dev Tools","dev-tools",79,"2026-09-22T22:21:13.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"Startups","startups",71,"2026-09-24T20:45:00.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"Gaming","gaming",46,"2026-09-24T17:52:29.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"General","general",44,"2026-09-23T22:37:28.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"Reviews","reviews",29,"2026-09-24T13:00:00.000Z",{"name":106,"slug":107,"count":108,"latest_published_at":109},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]