Trending storyPast story
Meta's Muse reportedly lets users download its entire filesystem
1 report1 sourceupdated 5 days ago
What happened
Summary
两个开发者分别用很短的提示就让 Muse 把整个根文件系统打包交了出来，包括 Ubuntu 系统文件、应用模板和内部文档。Saunders 说复现起来“极其容易”，Muse 几乎没有做任何提示注入防御。Meta 回应这不算是安全漏洞，因为每个用户本来就跑在一个持久的 Linux 虚拟机里。但正文没披露这种访问权限是否能让用户看到其他用户的数据或宿主机信...
Coverage
Follow the reports to see the story from different sides.
Sep 25
- The Verge · AIMeta's Muse reportedly lets users download its entire filesystem
Two developers independently got Muse to zip and share its full root filesystem, Ubuntu system files, app templates, and internal docs with minimal prompting. Saunders called it extremely easy to replicate and noted almost no prompt injection resistance. Meta says it's not a breach since each user runs in a persistent Linux VM.