Researcher Reports Meta Muse AI Exported 6.8 GB of Session Files After a Prompt
· 1:05 · Watch on YouTube ↗
Summary
Researcher Peter James says he prompted Meta’s Muse AI to archive and upload 6.8 GB of files from his session’s Linux environment, including documentation and SSH keys. Meta’s bug bounty team requested more evidence of security or privacy impact.
Key points
- Peter James says a prompt led Muse to zip files from his session and upload them to Google Drive.
- He reported accessing 6.8 GB of files from the Linux environment running his session, including internal documentation, agent instructions, skills, setup code, and SSH keys.
- The files reportedly included references to possible unreleased connectors and Home Link documentation about device pairing, local network discovery, and printer connections.
- Meta’s bug bounty program marked the report not acceptable and asked for more evidence of security or privacy impact.
- James had not established whether the SSH keys were active or what they could access; the export alone did not show access beyond his environment.
Article Details
- Topics
- [00:00] Report that a prompt led Meta’s Muse AI to archive and upload files from its session environment
- [00:10] Reported contents of the exported files, including documentation, SSH keys, and Home Link material
- [00:37] Bug bounty response and unresolved evidence about the keys and impact beyond the session environment