September 22, 2026
Muse closes an AI-agent takeover flaw: Meta releases patch on September 22
On 22 September, Meta released a patch for Muse on macOS: it closes a zero-day that could take over the AI agent. The vulnerability exploited a hidden dictation-handling setting.
A local app or Terminal command could previously change a Muse setting independently of macOS permissions. When the user pressed the microphone button, the request and audio could be redirected to an attacker's server.
Agent access. After replacing the endpoint, an attacker could intercept prompts and audio, obtain Muse authentication material, and use the access the user had granted the agent. The attack already required running code as the local macOS user.
A public PoC by researcher Patrick Wardle appeared on 21 September 2026.
* Meta Platforms Inc. is recognized in Russia as an extremist organization, and its activities are prohibited; Facebook and Instagram are blocked. Meta AI and other company products are products of this organization.
