I asked Meta’s Muse for its filesystem and it sent me 6.8 GB
![]()
On the blog of Mouse, a product not yet launched, Peter James describes asking Meta's Muse agent, in an ordinary conversation, to archive the files it could see and send them to Google Drive, and it did. The archive, about 6.8 GB unpacked, appeared to contain the root filesystem of the Linux environment assigned to the session: internal documentation, about 68 skills, 113 subagent records, memory files, agent logs and SSH key files. The post is careful about its limits: "I did not demonstrate an escape", and "I haven't established whether the SSH keys were active or what access they could provide." Reported through Meta's bug bounty programme, the finding was marked "Not Applicable".
Was this useful?