Meta makes the Muse filesystem even more accessible

Yesterday, people found that Meta’s Muse could be nudged into exposing its filesystem. The result was a strange little look behind the curtain: files, internal details, and a chatbot that seemed to know it wasn’t supposed to show them.

By today, that changed. Ask Muse for the filesystem now, and it will hand over the contents without much fuss. The shift is small on paper, but it changes the whole story. This wasn’t a stubborn model spilling secrets after a few tries. It was, apparently, meant to do that.

Meta’s Nat Friedman later said the behavior was intended. David Singleton, from Meta Superintelligence Labs, added more detail in a post on X, describing the choice as very deliberate. So the odd part here isn’t just that Muse can surface its filesystem. It’s that what first looked like an accidental leak now reads like a feature.

That makes the episode less about a mistake and more about how open Meta wants Muse to be when users go poking around. The answer, at least for now, seems to be: pretty open.