Meta says Muse file exports do not expose other users' data
By Automate Basics, written with AI from The Verge's original
The Verge reports that Meta's Muse has shared files from the virtual machine it provides to a user, including files that appear to describe how the AI works. Meta says exporting those files does not grant access to its infrastructure or other users' data.
What changed
The Verge reports that developers Peter James and Jonny L. Saunders independently got Meta's Muse to package and share files from the Linux virtual machine assigned to a user. Their exports included system files, app templates and documents that appeared to describe Muse's internal operations. The Verge says its own attempt produced a directory tree and copies of some folders with sensitive items, such as SSH keys, removed.
Meta disputes the idea that this is a security breach. Meta says each Muse user has a persistent virtual machine and that exporting its files does not provide privileged access to Meta systems or anyone else's data. A Meta representative also told The Verge that the company is updating Muse, so the amount of virtual machine information users can access may change.
Who can use Muse file exports?
The Verge describes the file exports as something Muse users were able to request from their own virtual machines. Its report does not establish that every user can obtain the same files, or that Muse will respond the same way each time. The reporter initially received refusals before a later session produced a directory tree and selected folders.
The source does not specify which Muse plans include file exports or give a price for using Muse. A Meta executive described the product as a free cloud computer, but the report does not set out plan terms or separate pricing for this capability. For a workplace evaluating Muse, the practical question is what an account can expose from its own environment, not whether it can reach another user's account.
How do I assess Muse for work?
A sensible first workplace task for Muse is one that does not require confidential material, while you establish what files the assistant can access and return. If Muse produces an archive or a list of folders, check whether it includes documents, account details or connection information that should not be shared. The Verge reports that one export omitted SSH keys, but that account does not establish a general rule for every export.
Treat descriptions of Muse's internal workings in exported files with care. The Verge says the developers found files about how Muse handles requests and connects to services such as Gmail, but the report does not verify every conclusion drawn from them. Meta says it may change how much virtual machine information users can see.
Frequently asked questions
Can Muse users download files from their virtual machine?
The Verge reports that two developers got Muse to package and share extensive files from their assigned virtual machines. Its reporter later received a directory tree and copies of selected folders with some sensitive items removed. The report does not show that every request or account will get the same result.
Does a Muse file export expose other people's data?
Meta says exporting data from a Muse user's virtual machine does not give that user privileged access to Meta infrastructure or other people's data. The Verge's report focuses on files from users' assigned environments, including material that appears to describe how Muse works.
Is the Muse file export feature available on a paid plan?
The Verge does not identify plans that include file exports or provide a price for the capability. It reports that Muse users have persistent Linux virtual machines and that Meta may change how much information users can access from them.
Related reading
Meta introduces Muse Charm as a wearable for its Muse AI agentMeta has introduced Muse Charm, a wearable tied to its Muse AI agent and a customizable character. TechCrunch reports little about how someone could use the device at work, or when they could get one.
PrismML adapts its Bonsai AI model for Qualcomm smart glassesPrismML has adapted its Bonsai language model to run locally on smart glasses using Qualcomm chips, TechCrunch reports. The model can answer questions about what a wearer sees, but no glasses using it have been announced.
Google Workspace adds email import from IMAP providers during setupGoogle says Workspace admins can now import a user's past email from an IMAP provider during setup. The option is available to all Google Workspace customers, but this setup feature handles only one user's email.
Written with AI from The Verge's original and published after automatic checks: every figure here appears in the original, and no sentence is copied from it. The picture is AI-generated. The original is the authority.
Source: Muse will apparently let you download its entire filesystem, The Verge, 24 Sept 2026.