AI Image
Muse will apparently let you download its entire filesystem
The Verge • • general
Key Points:
- Two developers independently discovered that Meta’s AI assistant Muse can be prompted to share its entire filesystem, including Ubuntu system files, app templates, and internal documentation, with minimal effort, exposing detailed internal workings of the platform.
- Meta denies this constitutes a security breach, explaining that Muse runs in isolated Linux virtual machines per user, and accessing these files does not grant privileged access to Meta’s infrastructure or other users’ data.
- This incident follows another recent Muse vulnerability that allowed account hijacking and transcription redirection, which Meta promptly patched with a hotfix.
- The leaked files reveal that Muse stores memory in plain Markdown files, performs nightly reviews of conversations to improve future interactions, and has many hard-coded capabilities, including subscription management and agent spawning controls.
- References were found to an unannounced hardware integration feature called Meta Home Link, potentially enabling Muse to access devices on a home network, though its release is not confirmed.
