Meta's Muse leaks its entire runtime through a simple file export
How Meta's Muse works, revealed by the 6.8 GB filesystem it sent me
A researcher asked Meta's Muse assistant to archive its filesystem and send it to Google Drive. The 6.8 GB export revealed internal documentation, 68 skill directories, unreleased connectors like Slack and Dropbox, an experimental Home Link integration for smart home devices, and SSH keys. Meta marked the bug bounty report Not Applicable, but the incident shows how internal runtime files can escape through ordinary conversations.
The concern I reported was that internal runtime files and sensitive material could leave that environment through an ordinary conversation and a connected export destination.
- tolugenius
> About 20 Markdown files described browser use, connectors, payments, credentials, data handling, generated files, voice, goals, and scheduling.
This the state of software engineering in 2026.
Edit: clarified engineering to software engineering, which is more correct
- ostensible
Each user gets dedicated VM. They got contents of their own sandbox. Big deal. The level of excitement here is wildly disproportionate
- simonpure
I asked it for it's harness and then asked agy to do a teardown. It's a monolithic 332MB binary written in Rust from scratch.
Full teardown is here:
https://gist.github.com/simonpure/d6f960045334453360eff1e2a0...
- nzoschke
That seems like a feature not a bug. Agents work best with full access to their computer, the same way developers work.
It gives me a glimmer of hope that openness will win. I don't trust Meta as a corp, but they've been doing the a lot of good things with open source, open models, and developer friendly agents.
More thoughts on agent computer architecture here, as I've been building our own open core system for this: https://housecat.com/blog/agent-computer-101
- estetlinus
Ah, glad to hear Muse has a Polymarket integration in the pipeline. I mean, what could possibly go wrong?
- rolosa
These files are visible in the muse app by browsing system files.
- rwmj
Seriously, no bug bounty for that? For exfiltrating the entire content of the system?
- munificent
The most potentially dangerous technology in the world is being created by the most irresponsible people on Earth.