Meta's Muse can be tricked into revealing its entire filesystem. Developers Peter James and Jonny L. Saunders show that with minimal prompting Muse will zip and share the root filesystem, including Ubuntu system files, app templates, and internal documentation. The incident exposes almost no prompt injection resistance, raising concerns about security for persistent Linux VMs used by the model.
Opening Kapyn…