开发者称可诱导 Meta Muse 下载其整个文件系统
原标题：Muse will apparently let you download its entire filesystem
AI 摘要
两名开发者 Peter James 和 Jonny L. Saunders 称，只需少量提示即可让 Meta 的 AI 助手 Muse 打包并分享其整个根文件系统、Ubuntu 系统文件、应用模板和内部文档，Saunders 称其「几乎没有提示注入抵抗力」。Meta 否认这是安全漏洞，称 Muse 运行在每位用户独立的持久 Linux 虚拟机中，导出虚拟机数据不会带来特权访问。这是本周披露的第二起 Muse 漏洞，此前安全研究员 Patrick Wardle 发现可劫持该 AI 代理的漏洞，Meta 已发布热修复。
正文节选
A pair of developers say that with very little prompting, Meta’s Muse will share its entire filesystem with you. Peter James and Jonny L. Saunders have said they both independently coaxed Muse into zipping up and sharing the entire contents of its root filesystem, Ubuntu system files, app templates, and internal documentation. Saunders posted on Mastodon that it was “extremely easy” to replicate James’ results and that Muse had “Almost no prompt injection resistance.” Muse will apparently let yo