Meta's Muse agent handed over its full 6.8GB sandbox filesystem, including SSH keys

MikePFrank · x · 2026-09-25

A security researcher asked Meta's Muse agent to archive what it could see and send it to Google Drive—and received a 2.7GB compressed / 6.8GB unpacked dump of the session's Linux root filesystem, including Muse's internal docs (codename Hatch), integration code, app templates, memory files, agent logs, and SSH key files. Internal runtime files and sensitive material could leave the environment via ordinary conversation plus a connected export destination. Reported via Meta's bug bounty; no container escape demonstrated, archive not published.

Related event: Meta Muse agent tricked into leaking its entire sandbox filesystem(2 posts)→

Original post →

More from coding & agent

coding & agent channel →