Meta · Safety and security · Agents
Meta closed a Muse vulnerability that could open the way to users’ email and files
The flaw, found by Mac security researcher Patrick Wardle, used an undocumented setting to redirect dictation traffic in the Muse Mac app to another server and capture authentication tokens. Because Muse asks for access to files, email, calendar, messages and WhatsApp, anyone hijacking the agent could use all of those permissions. The precondition is malicious code already running on the computer. Meta fixed it on September 22 by removing the setting, calling it a local rather than remote attack with low risk. Wardle argues that common tricks which get users to run malicious commands make that precondition easy to meet.
Sources
- Patrick Wardle, post on X disclosing the flaw, (x.com)
- Meta (David Singleton), post on X with Meta's statement, (x.com)
- Gizmodo, “Meta Just Patched a Major Zero-Day Vulnerability in Its Muse AI Assistant”, (gizmodo.com)
- InfoQ, “Un-Mused: How a Single Debug Setting Bypassed macOS Security in Meta’s AI Client”, (infoq.com)
About this story
This story was posted on Instagram by @jarrus.tech on Sept. 29, 2026.
Spotted an error in this story? [email protected] · Instagram
Short link: thejarrus.com/en/h9-22
This story in Turkish: Meta, Muse’da e-postalara ve dosyalara erişimin yolunu açabilen bir güvenlik açığını kapattı
On the same topic
OpenAI and Synopsys are building a custom model for chip design
Synopsys and OpenAI announced on September 30 a multi-year partnership to develop GPT-Synopsys, a model meant to run chip design tools like an expert engineer.
Google DeepMind unveils SynthID Bio, which adds invisible watermarks to AI-designed proteins
Google DeepMind’s SynthID Bio, unveiled on September 30 with a Nature paper, embeds a statistically detectable watermark in AI-designed proteins.
California brings in fines of up to $10,000 per vehicle for robotaxis that block emergency vehicles
SB 1246, signed by Governor Gavin Newsom on September 30, allows fines of up to $10,000 per driverless vehicle that blocks an emergency for over 30 minutes.