What exactly changed about Muse's filesystem access?

Yesterday, when asked, Muse offered only a text file download showing its directory tree. Today it promptly offered a clickable file browser with access to root, and zipped up the root directory without hesitation.

Did Meta confirm this is intentional?

Yes. Meta's Nat Friedman said it is the "intended behavior," and Meta Superintelligence Labs' David Singleton elaborated that it was a very deliberate choice.

Why did Muse initially refuse to share its filesystem?

Meta has not yet responded to why Muse initially called filesystem access a security issue if it was always the intended behavior. David Singleton said this was a deliberate choice, but the article notes Muse may not be fully reliable at knowing what it can and can't do.

Large Language ModelsThe Verge AI4h agoSep 26, 2026, 04:00 JST

Meta's Nat Friedman: Muse filesystem access is "intended behavior"

Send on LINE

3 Key Points

What happened
Meta's Muse now offers a clickable file browser with root access when asked for its filesystem, after yesterday only providing a text file download. Nat Friedman said this is the "intended behavior," and David Singleton explained it's a deliberate choice.
Why it matters
The shift suggests the earlier refusal to share a full root archive citing security concerns may reflect an update rather than a firm security boundary.
What to watch
It's unclear whether the initial refusal was a reliability quirk or a deliberate policy change, and Meta has not responded to why filesystem access was called a security issue if it was always intended. Watch for Meta's response to that question.

WHO IT HITSDevelopers and technical users of Meta's Muse who write and compile code in the cloud-based virtual machine would now have direct root-level access to its filesystem, potentially changing what they can do inside the environment.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Get news like this every morning, free

Context & Analysis

Meta's Muse stands out from AI chatbots like ChatGPT and Gemini by giving users what David Singleton described as their own computer in the cloud — a Linux box they can operate as they choose [the body says "Muse's architecture is fundamentally different from other AI platforms like ChatGPT and Gemini. It's closer to running OpenClaw on a local machine, except the machine is in the cloud."]. The past two days have shown just how literally Meta means that: after initially refusing to share a full root archive, Muse is now zipping up its root directory on request. Meta spokesperson Daniel Roberts said the company is continuing to make updates, and users may see changes in how much information is available about their virtual machine. Whether the earlier refusal was a reliability gap or a policy shift remains unclear — and what it means for users who treat Muse as a genuine cloud computer hinges on whether this open access holds steady.

FAQ

What exactly changed about Muse's filesystem access?: Yesterday, when asked, Muse offered only a text file download showing its directory tree. Today it promptly offered a clickable file browser with access to root, and zipped up the root directory without hesitation.
Did Meta confirm this is intentional?: Yes. Meta's Nat Friedman said it is the "intended behavior," and Meta Superintelligence Labs' David Singleton elaborated that it was a very deliberate choice.
Why did Muse initially refuse to share its filesystem?: Meta has not yet responded to why Muse initially called filesystem access a security issue if it was always the intended behavior. David Singleton said this was a deliberate choice, but the article notes Muse may not be fully reliable at knowing what it can and can't do.

The Verge AIRead Original Article

Send on LINE

Get the latest Large Language Models news every morning

For example, today's edition would include:

Salesforce at Dreamforce 2026: UCLA Health hits 75,000+ AI chatsTop Companies AI · 2h ago
Kavukcuoglu: Gemini 4 hits post-training, early ship eyedTop Companies AI · 2h ago
CrowdStrike (CRWD) joins Blueprint Alliance for AI agent securityTop Companies AI · 2h ago

AI-summarized, only the topics you pick: one digest a day via Email, LINE, or Slack.

Subscribe free →

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.