Meta patches Muse exploit that let attackers control the AI agent

Meta has issued a patch for its Muse macOS app following the discovery of a zero-day vulnerability. This flaw, identified by security researcher Patrick Wardle, allowed potential attackers to take control of Muse accounts by exploiting an undocumented setting within the app. The vulnerability enabled attackers with local access to redirect transcription processing from Meta's servers to their own endpoint. This means that anyone with local access to the user's device could potentially access Muse accounts, posing a significant privacy risk.