Meta's Muse gives every user an Ubuntu cloud computer — and says root filesystem access is intentional

Meta's Muse agent now provides each user a free Ubuntu Linux cloud VM with a Sentinel monitor isolating sensitive actions; The Verge reports the VM's filesystem, including root, is openly accessible by design, reversing an earlier refusal.

Meta's Muse agent now gives every user a free cloud computer running a full Ubuntu Linux image, where they can install software, compile code, and browse the web. David Singleton of Meta Superintelligence Labs said a Muse Secure VM isolates work in a Runtime Cell, while a Sentinel process outside the cell monitors sensitive actions and keeps credentials separate — a design intended to stop prompt injection from reaching Meta infrastructure or other users' data, with users able to inspect files inside the cell. On 2026-09-25, The Verge reported that Muse now readily exposes its filesystem, including a clickable file browser with root access and a zipped root archive with secrets stripped. Nat Friedman and David Singleton of Meta Superintelligence Labs said the Muse Secure VM is intentionally the user's own cloud Linux computer, unlike ChatGPT or Gemini. However, just a day earlier Muse had refused a full root copy citing security concerns, and Meta has not yet explained why the model previously treated filesystem access as a security issue. Muse drew more than 500,000 users in its first week and hit number one on the Apple App Store; Meta Connect 2026 also added video chat, email, and Mac app control.

• Every Muse user gets a free cloud computer running a full Ubuntu Linux image for installing software, compiling code, and browsing the web.
• A Muse Secure VM isolates work in a Runtime Cell; a Sentinel process outside the cell watches sensitive actions and keeps credentials separate from the cell.
• Meta says the isolation design is intended to stop prompt injection from reaching Meta infrastructure or other users' data; users can inspect files inside the cell.
• The Verge (2026-09-25) reports Muse now offers a clickable file browser with root access and a zipped root archive with secrets stripped.
• A day before The Verge's report, Muse refused a full root copy and cited security concerns; Meta has not explained the earlier refusal.
• Nat Friedman and David Singleton of Meta Superintelligence Labs say the Muse Secure VM is intentionally the user's own cloud Linux computer, unlike ChatGPT or Gemini.
• Muse drew more than 500,000 users in its first week and reached number one on the Apple App Store.
• Meta Connect 2026 added video chat, email, and Mac app control to Muse.