Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw

Summary

Meta's Muse AI assistant, launched weeks ago as a macOS app with access to WhatsApp, email, calendar and social accounts, contained a zero-day that let any locally installed app or terminal command reach the token authenticating users to their Muse account. Attackers could have redirected the transcription endpoint to their own server to capture that token. Meta released a hotfix more than 12 hours after the report was published, and Amazon began blocking Muse from its site.

Mitigation

Meta said it released a hotfix that patched the 0-day.

Related items

• InfoeBay appears to have shut the door on third-party AI agentsSame vendor · The Verge (AI)
• InfoEven Martin Scorsese uses AI for storyboards. Can the art survive?Same vendor · The Guardian Technology
• InfoIntroducing Our Smallest, Most Efficient Model: Muse EmberSame vendor · Simon Willison's Weblog
• InfoApple is racing to make Siri more agenticSame vendor · The Verge (AI)
• InfoSecuring Locally Deployed LLM-RAG Assistants: A Cross-Model and Cross-Lingual Evaluation of Indirect Prompt Injection DefensesSame vendor · OpenAlex (peer-reviewed AI security)