Muse, Meta's privileged AI assistant, hit by serious 0‑day vulnerability
agents meta
| Source: Ars Technica | Original article
Meta's privileged AI assistant Muse harbors a serious zero‑day flaw that can be fully hijacked through a simple ClickFix attack.
Meta’s newest AI assistant, Muse, has been hit by a critical zero‑day vulnerability that lets any locally‑run macOS application or terminal command hijack the agent. Security researchers say the flaw exposes the authentication token that links a user to their Muse account and permits unrestricted changes to a long list of undocumented settings. One demonstrated exploitation method, dubbed a “ClickFix” attack, can fully commandeer the assistant with a single user click.
The issue matters because Muse was marketed as a privacy‑first, highly privileged personal AI, designed to act as a seamless “teammate” across devices. Its elevated permissions give it access to personal data, shopping accounts and, as recent reports show, even the ability to place calls. If malicious code can seize control, attackers could impersonate users, issue commands, or exfiltrate sensitive information—all without the usual macOS sandbox constraints.
The discovery arrives just weeks after Muse’s rapid rise to the top of the U.S. App Store and after Amazon blocked the assistant from shopping on its platform over security concerns. It also follows earlier security incidents with the Muse Spark 1.1 version. Meta has not yet issued a patch or official comment, but a former security‑engineering manager who left the company this month publicly warned he would no longer use the product.
Watch for an official response from Meta, including a security advisory and remediation timeline. Security analysts will be tracking whether the vulnerability spreads to other operating systems or to the upcoming camera‑free smart‑glasses that integrate Muse. The episode could also prompt regulators and privacy advocates to scrutinise Meta’s claims of “built from the ground up for privacy and security.”
Sources
Back to AIPULSEN