Technology news and discussion on TalkFuse.
Muse, Meta’s extraordinarily privileged AI assistant, has a serious 0-day
Meta's new AI assistant Muse contains a serious zero-day security vulnerability that undermines the company's claims about its privacy and security. Despite CEO Mark Zuckerberg's assertions that the tool was "built from the ground up for privacy and security," the flaw allows any locally installed application or terminal command to gain complete control of the assistant. The discovery is significant because Muse has extraordinarily broad permissions—including access to authentication tokens, the ability to make purchases, generate images, access cameras and microphones, and monitor calendars and location data.
The vulnerability, discovered by macOS security researcher Patrick Wardle, exploits a design flaw that allows any app to modify undocumented settings, including the endpoint for audio transcription. By redirecting the transcription endpoint to a malicious server, attackers can intercept the authentication token that grants complete control over a user's Muse account. Wardle has developed proof-of-concept attacks demonstrating the exploit can write malicious files to disk and activate cameras without alerting users. The discovery has prompted swift action from Amazon, which began blocking Muse from its platform, whilst Meta has declined to publicly address the security concerns.
In short
- Meta's Muse has zero-day vulnerability allowing local apps to hijack the assistant
- Attackers can steal authentication tokens and control user accounts completely
- Flaw stems from poor design decisions about transcription and app permissions
Explained simply
Muse is an AI assistant made by Meta, the company that owns Facebook and Instagram. It can handle tasks such as answering questions, creating images and using features on a person’s device, so it may be given access to sensitive information and controls.
A zero-day vulnerability is a security flaw that is discovered before the maker has released a fix. In this case, researcher Patrick Wardle reported that another app on a Mac could change Muse settings and potentially capture a token used to control an account.
The issue matters because access to an assistant with broad permissions could expose private data or allow actions such as using a camera. It also raises questions about how AI tools are protected when they connect to device features and personal accounts.