{"id":257399,"date":"2026-09-23T17:43:18","date_gmt":"2026-09-23T14:43:18","guid":{"rendered":"https:\/\/digitrendz.blog\/z\/?p=257399"},"modified":"2026-09-23T17:43:18","modified_gmt":"2026-09-23T14:43:18","slug":"metas-muse-ai-launches-with-critical-security-flaw","status":"publish","type":"post","link":"https:\/\/digitrendz.blog\/z\/tech-news\/257399\/metas-muse-ai-launches-with-critical-security-flaw\/","title":{"rendered":"Meta\u2019s Muse AI Launches With Critical Security Flaw"},"content":{"rendered":"
\u25bc Summary<\/summary>

– Meta’s new AI assistant Muse was heavily hyped for privacy and security but faces scrutiny due to a critical zero-day vulnerability.
– The flaw allows locally run apps or terminal commands to gain complete control over the agent by stealing authentication tokens.
– Security expert Patrick Wardle demonstrated that attackers could exploit this to perform malicious actions like writing files or taking photos without detection.
– Amazon blocked access to Muse on its site, raising further questions about the assistant’s safety and reliability in production environments.
– Meta released a hotfix to patch the vulnerability shortly after the security risks were publicly disclosed and analyzed.
<\/p><\/details>\n\n

<\/p>\n\n

M<\/mark>eta\u2019s new AI assistant, Muse<\/a><\/strong>, has faced immediate scrutiny following the discovery of a critical zero-day vulnerability<\/a><\/strong>. Despite CEO Mark Zuckerberg<\/a>\u2019s insistence that the tool is \u201cbuilt from the ground up for privacy and security,\u201d the flaw allows locally run applications and terminal commands to seize complete control of the agent. The severity of the issue was underscored when Amazon<\/a> began blocking access to Muse on its platform just days after the assistant\u2019s launch.<\/p>\n\n

Unprecedented System Access<\/h2>\n\n

Introduced a few weeks ago, Muse is designed to automate complex tasks such as booking appointments, filling out forms, and handling customer service interactions. It can also generate images, create documents, make purchases, and integrate with popular services like WhatsApp<\/a>, email, and social media platforms. A notable feature is its ability to dynamically create tools for tasks that lack existing integrations. While the application is currently available exclusively for macOS<\/a>, it requires users to grant extensive permissions to function properly. These permissions include authentication across multiple services and deep system-level access to resources such as disk writing capabilities, microphone and camera inputs, location tracking, and calendar data. This level of access effectively bypasses the protective barriers Apple<\/a> has spent years implementing to shield users from malicious software and unauthorized command-line operations.<\/p>\n\n

Exploiting Cloud-Based Dictation<\/h2>\n\n

The identified zero-day vulnerability specifically targets the token used to authenticate users within their Muse accounts. Because Meta<\/a> developers allowed any locally installed app or executed code to modify undocumented settings, attackers could alter the endpoint where transcription occurs. Normally, this process directs data to Meta\u2019s secure servers. However, by redirecting this endpoint to a malicious server, an attacker could intercept the authentication token, thereby gaining full administrative control over the user\u2019s account.<\/p>\n\n

Patrick Wardle<\/a>, a prominent macOS security expert who uncovered the flaw, highlighted the ease with which the assistant\u2019s privileges could be hijacked. \u201cWe can manipulate the agent and leverage its privileges to do whatever we want,\u201d Wardle explained. \u201cSo instead of us having to write a very comprehensive Mac malware stealer, we can just leverage the AI assistant itself.\u201d He demonstrated several proof-of-concept attacks that included writing malicious files to disk and capturing photos, often without triggering alerts even for vigilant users. Although Meta released a hotfix more than 12 hours after the initial report, the incident raises significant concerns about the architectural choices made during development.<\/p>\n\n

Design Choices Under Fire<\/h2>\n\n

Wardle noted that specific design decisions facilitated the exploit, particularly the choice to perform dictation in the cloud rather than locally. By opting for cloud-based processing to facilitate logging, Meta ignored safer, device-local alternatives that have long been available on macOS. This decision exposed users to risks that could have been easily mitigated. The controversy emerges alongside broader industry discussions regarding AI safety, including recent reports of internal testing breaches involving models from Anthropic and Google. As calls to slow down AI development intensify, Meta\u2019s handling of Muse\u2019s security architecture faces intense scrutiny for prioritizing functionality over robust protection mechanisms.<\/p>\n\n(Source: Wired<\/a>)<\/em>","protected":false},"excerpt":{"rendered":"

Meta\u2019s new AI assistant, Muse, faces intense scrutiny after a critical zero-day vulnerability was discovered that allows locally run applications to seize complete control of the agent. The flaw exploits cloud-based dictation by redirecting authentication tokens to malicious servers, enabling att…<\/p>\n","protected":false},"author":1,"featured_media":257398,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"cybocfi_hide_featured_image":"","footnotes":""},"categories":[57,3247,6579,3297,3327,497],"tags":[133,252135,218234,544,254908],"entities":[805,6444,4652,889,749,78310,257525,1680],"class_list":["post-257399","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech-news","category-artificial-intelligence","category-bigtech-companies","category-cybersecurity","category-newswire","category-trending-news","tag-amazon","tag-ars","tag-macos","tag-meta","tag-muse","entity-amazon","entity-ars","entity-macos","entity-mark-zuckerberg","entity-meta","entity-muse","entity-patrick-wardle","entity-whatsapp"],"_links":{"self":[{"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/posts\/257399","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/comments?post=257399"}],"version-history":[{"count":2,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/posts\/257399\/revisions"}],"predecessor-version":[{"id":257401,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/posts\/257399\/revisions\/257401"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/media\/257398"}],"wp:attachment":[{"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/media?parent=257399"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/categories?post=257399"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/tags?post=257399"},{"taxonomy":"entity","embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/entities?post=257399"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}