Muse will apparently let you download its entire filesystem

<figure> <img alt="The Muse AI mascot and logo." data-caption="" data-portal-copyright="Image: The Verge, Getty Images, Meta" data-has-syndication-rights="1" src="https://platform.theverge.com/wp-content/uploads/sites/2/2026/09/STKB394_MUSE_AI_CVIRGINIA_A.png?quality=90&#038;strip=all&#038;crop=0,0,100,100" /> <figcaption> </figcaption> </figure> <p class="wp-block-paragraph">A pair of developers say that with very little prompting, Meta's Muse will share its entire filesystem with you. Peter James and Jonny L. Saunders have said they both independently <a href="https://mouse.dev/blog/muse-runtime-export/">coaxed Muse</a> into zipping up and sharing the entire contents of its root filesystem, Ubuntu system files, app templates, and internal documentation. Saunders <a href="https://neuromatch.social/@jonny/117324790823856750">posted on Mastodon</a> that it was "extremely easy" to replicate James' results and that Muse had "Almost no prompt injection resistance."</p> <p class="wp-block-paragraph">Meta denies that the incident represents a security breach. As noted in its announcement post, Meta's Muse <a href="https://about.fb.com/news/2026/09/introducing-muse-personal-ai-agent/">runs in persistent Linux virtual machines</a> for each user. Meta spokes …</p> <p><a href="https://www.theverge.com/ai-artificial-intelligence/1000222/meta-muse-ai-filesystem">Read the full story at The Verge.</a></p>