Researchers Confirm Meta's Muse AI Agent Can Export VM Files With Simple Prompts

On September 24, 2026, tech outlet MacObserver reported that Meta's personal AI agent, Muse, can be instructed with simple prompts to package and return a large number of Linux files from a user's dedicated virtual machine. The issue was independently reproduced by developers Peter James and Jonny L. Saunders. Exported files include system files, application templates, internal run documents, and Markdown and JSON files, potentially exposing internal mechanisms such as request handling, memory storage, service connections, and background tasks.

According to the report, the agents/ directory contains 113 sub-agent records and JSONL trace files. Around 20 Markdown documents describe features related to browsers, connectors, payments, credentials, data processing, voice, goals, and scheduled tasks. Researchers also identified about 68 skill directories, covering Google Workspace, Meta social apps, Outlook, travel, shopping, health services, home devices, and media generation. Configuration files also mention connectors including Slack, Dropbox, Polymarket, Canva, and Klaviyo.

Muse is Meta's personal AI agent that operates in a cloud virtual machine, handling files, invoking a browser, and connecting to external services such as email. Users can access Muse through mobile or web interfaces. Its runtime environment contains workspace files, agent tools, and some persistent data, with isolation mechanisms limiting access to the host system and external network.