From The Verge · Terrence O'Brien · · 1m 20s
Meta's Muse now shares its full filesystem
Meta's AI agent Muse reversed course and now willingly downloads its entire filesystem, saying this was always the intended behavior.
In brief
Meta's AI agent Muse reversed course and now willingly downloads its entire filesystem, saying this was always the intended behavior. Meta's Muse AI agent now readily shares its complete filesystem with users, reversing earlier refusals and confirming this as intended design. Originally reported by The Verge.
Muse's filesystem was exposed

Yesterday, Meta's Muse AI agent was discovered to expose its filesystem to users. The files revealed details Muse itself said it wasn't supposed to share.
Today Muse changed its mind
Today Muse eagerly offers its entire filesystem when asked. Meta says this is the intended behavior, not a security flaw or accidental exposure.
“intended behavior”
Muse is a cloud computer
Meta Superintelligence Labs' David Singleton explained that Muse is fundamentally different from ChatGPT and Gemini. Your Muse Secure VM is your own Linux box in the cloud.
“your Muse Secure VM truly is your own computer in the cloud”
Access improved overnight

Yesterday Muse offered only a text file showing its directory tree. Today it provides a clickable file browser with root access and zips the full filesystem without hesitation.
Yesterday's refusal remains unexplained
Muse initially refused filesystem copies, citing security concerns. Meta spokesperson Daniel Roberts said the company is making updates to the product. The Verge asked why Muse called it a security issue if intended, but Meta has not responded.
“I still can't do a full / copy, even with the secrets stripped out”
In short
Meta's Muse AI agent now readily shares its complete filesystem with users, reversing earlier refusals and confirming this as intended design.




