Patrick Wardle (Organization): news timeline & CVEs

Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw

Zero-day in Meta's Muse macOS AI assistant let any local app redirect transcription and steal account-control tokens; Meta released a hotfix.

macOS security researcher Patrick Wardle disclosed a zero-day in Meta's Muse AI assistant that allowed any locally installed app or terminal command, regardless of macOS permissions, to change undocumented settings including the transcription endpoint. Redirecting that endpoint to an attacker-controlled server exposed the token granting complete control of the Muse account and enabled prompt manipulation, file writes, and camera access with no user indication. Meta released a hotfix roughly 12 hours after disclosure, and Amazon separately began blocking Muse from its site as an unauthorized AI agent.

WIRED · SecuritySep 23, 12:54 UTC · 3d agoAI safety & security 6 sources1

Meta Muse AI app flaw lets local malware redirect dictation traffic

Researcher Patrick Wardle's PoC shows unprivileged local code can hijack Meta Muse macOS dictation traffic, exposing voice prompts and abusing app access.

Patrick Wardle of Objective-See released a proof-of-concept dubbed 'not-a-mused' demonstrating a local zero-day in Meta's Muse macOS AI assistant app. An unprivileged local process can modify the undocumented endo_voyager_dictation_endpoint setting to redirect dictation traffic to an attacker-controlled server, exposing dictated audio, prompts, and authentication material, and enabling prompt injection or abuse of permissions granted to the app. The flaw is not remotely exploitable and requires prior local code execution, effectively acting as a privilege escalation for local malware. Wardle argues broad-access AI apps undermine Apple's TCC privilege separation and complicate EDR detection, and notes Meta could have avoided the issue by using Apple's on-device dictation API.

The Register · Securityupdated Sep 22, 03:13 UTC · 5d agofirst Sep 21, 19:59 UTC · 5d agoVulnerability 2 sources

Patrick Wardle

Timeline2 articles

Appears with

Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw

Meta Muse AI app flaw lets local malware redirect dictation traffic