Developers claim Meta's Muse can share its entire filesystem

<figure> <img alt="The Muse AI mascot and logo." src="https://platform.theverge.com/wp-content/uploads/sites/2/2026/09/STKB394_MUSE_AI_CVIRGINIA_A.png?quality=90&amp;strip=all&amp;crop=0,0,100,100" /> <figcaption> </figcaption> </figure> <p class="wp-block-paragraph">Developers Peter James and Jonny L. Saunders report that Meta's Muse can share its entire filesystem with minimal prompting. They claim to have independently prompted Muse to zip and share the contents of its root filesystem, including Ubuntu system files, app templates, and internal documentation. Saunders noted on Mastodon that replicating James' results was "extremely easy" and that Muse exhibited "almost no prompt injection resistance." </p> <p class="wp-block-paragraph">Meta has stated that this incident does not indicate a security breach. According to Meta's announcement, Muse operates within persistent Linux virtual machines for each user.</p> <p><a href="https://www.theverge.com/ai-artificial-intelligence/1000222/meta-muse-ai-filesystem">Read the full story at The Verge.</a></p>