Muse will apparently let you download its entire filesystem
TL;DR
A pair of developers say that with very little prompting, Meta's Muse will share its entire filesystem with you. Peter James and Jonny L. Saunders have said they both independently coaxed Muse into zipping up and sharing the entire contents of its root filesystem, Ubuntu system files, app templates, and internal documentation. Saunders posted on Mastodon that it was "extremely easy" to replicate James' results and that Muse had "Almost no prompt injection resistance.
Nauti's Take
Teams using Muse in real workflows should keep sensitive files, tokens, and internal prompts out of the environment until its isolation is independently tested. Start with a reproducible scope check: which paths, environment variables, and system documents can Muse read or package, and does the behavior persist after a restart?
Meta's statement remains one vendor position while independent testing is still limited.
Sources