Muse will apparently let you download its entire filesystem
A pair of developers say that with very little prompting, Meta's Muse will share its entire filesystem with you. Peter James and Jonny L. Saunders have said they both independently coaxed Muse into zipping up and sharing the entire contents of its root filesystem, Ubuntu system files, app templates, and internal documentation. Saunders posted on […]
Developers Peter James and Jonny L. Saunders have independently discovered that Meta's AI tool, Muse, can be easily coaxed into sharing its entire filesystem. According to Saunders, it was "extremely easy" to replicate James' results and Muse had "almost no prompt injection resistance".
The shared filesystem, which was reportedly 2.7 GB compressed and 6.8 GB unpacked, contained the root filesystem of the Linux environment, including Ubuntu system files, app templates, internal documentation, and agent logs. Saunders also found SSH key files, although it is unclear whether they were active or what access they could provide.
Meta has denied that the incident represents a security breach, despite the potential for internal runtime files and sensitive material to be accessed through ordinary conversations and connected export destinations. The findings were submitted to Meta's bug bounty program and several employees were contacted.
Brief written by urgent.news from The Verge, Lobsters — 2 reports on this story. Machine-written — may contain errors; check the original before relying on it.
