Meta's Muse now shares its full filesystem

Meta's AI agent Muse reversed course and now willingly downloads its entire filesystem, saying this was always the intended behavior.

By ·

Sep 25, 2026

5 cards · 1m 20s · tap to begin

From · · · 1m 20s

Meta's Muse now shares its full filesystem

Meta's AI agent Muse reversed course and now willingly downloads its entire filesystem, saying this was always the intended behavior.

In brief

Meta's AI agent Muse reversed course and now willingly downloads its entire filesystem, saying this was always the intended behavior. Meta's Muse AI agent now readily shares its complete filesystem with users, reversing earlier refusals and confirming this as intended design. Originally reported by The Verge.

Muse's filesystem was exposed

STKB394_MUSE_AI_CVIRGINIA_D

Yesterday, Meta's Muse AI agent was discovered to expose its filesystem to users. The files revealed details Muse itself said it wasn't supposed to share.

Today Muse changed its mind

Today Muse eagerly offers its entire filesystem when asked. Meta says this is the intended behavior, not a security flaw or accidental exposure.

“intended behavior”

Muse is a cloud computer

Meta Superintelligence Labs' David Singleton explained that Muse is fundamentally different from ChatGPT and Gemini. Your Muse Secure VM is your own Linux box in the cloud.

“your Muse Secure VM truly is your own computer in the cloud”

Access improved overnight

Access improved overnight

Yesterday Muse offered only a text file showing its directory tree. Today it provides a clickable file browser with root access and zips the full filesystem without hesitation.

Yesterday's refusal remains unexplained

Muse initially refused filesystem copies, citing security concerns. Meta spokesperson Daniel Roberts said the company is making updates to the product. The Verge asked why Muse called it a security issue if intended, but Meta has not responded.

“I still can't do a full / copy, even with the secrets stripped out”

In short

Meta's Muse AI agent now readily shares its complete filesystem with users, reversing earlier refusals and confirming this as intended design.

Read the original on The Verge

React

Sign in to react and comment.

Comments (0)

Life is short. Keep it sweet. Respect others' opinions and be kind!

    Recommended next

    More decks on meta and related topics.