Meta patches Muse exploit that let attackers control the AI agent
highnews
security
Source: The Verge (AI)September 22, 2026
Summary
Meta released a patch for its Muse macOS app after a zero-day vulnerability (an unknown security flaw) was discovered that could let attackers take control of the AI agent. The bug, found by security researcher Patrick Wardle, exploited an undocumented setting that allowed attackers with local access (ability to run code on a user's device) to redirect Muse's transcription processing to their own server, gaining unauthorized access to the user's Muse account.
Solution / Mitigation
Meta has issued a patch for the Muse macOS app.
Classification
Attack Type
Other
Attack SophisticationModerate
Impact (CIA+S)
confidentialityintegrity
Affected Vendors
Meta
Related Issues
Monthly digest — independent AI security research
Original source: https://www.theverge.com/tech/998679/meta-muse-patch-zero-day-exploit-ai-agent
First tracked: September 22, 2026 at 02:01 PM
Classified by LLM (prompt v3) · confidence: 85%