Two developers found that Meta’s Muse agent could package and return extensive portions of the Linux filesystem inside their own Muse virtual machines. The exports reportedly included system files, application templates and internal documentation about how the agent operates.
Peter James documented his export, while Jonny L. Saunders said on Mastodon that he independently reproduced it. Their findings establish access to files inside a user’s assigned environment, not access to another person’s account.
Meta told The Verge that it does not consider the behavior a breach. A company spokesperson compared it with viewing files on a personal laptop and said exporting the virtual machine does not provide privileged access to Meta infrastructure or other users’ data.
Don’t miss the best of The Mac Observer
Set us as a preferred source and our Apple reporting ranks higher in your Google Search results and Discover feed — one tap, no account changes.
Why the files still matter
The material can reveal implementation details that Meta does not normally expose through the Muse interface. The reported archive contained Markdown and JSON files describing memory, request handling and connected services, along with code and compiled libraries. Saunders argued that the volume and consistency of the files made a fabricated response unlikely.
That does not prove every interpretation of the files is correct. Claims about unannounced integrations, future features or the origin of particular scripts remain unverified unless Meta confirms them. The safest conclusion is narrower: Muse returned a substantial view of its own runtime environment when prompted.
Meta’s security documentation says each Muse workspace runs in an isolated container inside a dedicated virtual machine, with a separate Sentinel component controlling internet access. The company says it is continuing to adjust how much virtual-machine information users can retrieve.
The report adds a new transparency and hardening question to a product MacObserver previously introduced as a personal agent for iPhone and Mac. Muse has also reached the top of the US iPhone chart, increasing the number of people who may encounter these safeguards. Users should not treat the export as proof that other accounts are exposed, but Meta still has reason to limit unnecessary implementation details.
Discussion