Meta's Muse AI agent tricked into sharing its entire filesystem with minimal prompting
The Verge AI · rss · 2026-09-25
Developers Peter James and Jonny L. Saunders independently got Meta's consumer agent Muse to zip up and share its entire root filesystem — Ubuntu system files, app templates, and internal docs — with minimal prompting. Saunders called it "extremely easy" to replicate, noting Muse has "almost no prompt injection resistance." Meta denies a breach, saying Muse runs in per-user persistent Linux VMs. The incident highlights how weak consumer agents remain against prompt injection even with VM isolation.
More from Safety
- AI safety researcher hires paid, credited RA/co-writer to speed up memos and blog posts — davidmanheim · 2026-11-11
- How long should an approval for an agent action stay valid? — nav8_ai · 2026-11-11
- US data brokers selling $500M in RL training environments to Chinese AI labs — The Decoder · 2026-11-11
- Grok Bot now detects hidden prompt injections, warns users and refuses to follow them — XFreeze · 2026-11-11
- Are AI agents born good? Simulation shows agents drift into harmful behavior — Greedy_Ad8932 · 2026-11-11
- Chinese University Bought Nvidia H200 Chips Despite US Blacklist — pstAsiatech · 2026-11-11