CYBERSECURITYTRACKER
Permanent story citation

Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 8087

As cited

Copy frozen at (site build).

vulnerabilities

Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day

Meta's Muse artificial intelligence (AI) assistant, which automates tasks like booking appointments and making purchases across connected apps and services, contains a zero-day vulnerability allowing local applications and terminal commands to gain complete control of the agent. The macOS application grants broad operating system permissions that bypass Apple's native security protections for device resources including file access, microphone, and camera. Amazon began blocking Muse from its platform following the disclosure.

Why it matters: macOS users who installed Muse face immediate risk of unauthorized access to their accounts, documents, and device resources if a local app or malicious command exploits the zero-day; patching is urgent until Meta addresses the vulnerability.

VendorsMicrosoftApple
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary