Meta Releases Hotfix After Local Zero-Day Vulnerability Found in macOS Muse App
According to The Verge, Meta released a hotfix for the macOS Muse app after researcher Patrick Wardle demonstrated a local zero-day vulnerability.
Meta Muse hotfix was released after a local zero-day vulnerability was found in the macOS Muse app. Researcher Patrick Wardle demonstrated that an unprivileged process running under a user account could change an undocumented dictation target setting and redirect traffic to an attacker-controlled endpoint.
According to The Verge, Meta released the hotfix within several hours of the issue being disclosed. David Singleton of Meta Superintelligence Labs described the flaw as a local privilege escalation. A separate public Meta security bulletin with a version number or CVE was not found.
Meta Muse hotfix after an attack requiring local access
An important limitation of the demonstrated technique is that it required prior access to the device. Malicious code already had to be running on the Mac under a user account; this was therefore not a remote attack without prior access to the system.
Wardle’s proof of concept used a setting related to dictation. A local unprivileged process could modify it so that the app communicated with an endpoint controlled by the attacker. No cases of this vulnerability being exploited against users beyond the researcher’s demonstration have been publicly confirmed.
Why AI agent permissions matter
Muse functions as a personal AI agent and can work with services or system resources to which the user has granted it access. When introducing the product, Meta described its integrations and user permission model.
These access rights increase the significance of a local flaw. Manipulating the agent or taking over its account could expand the capabilities of malware already running on the device. However, the specific range of available actions depended on the permissions and connected services granted by the individual user.
The case also illustrates the security risk of applications that have access to files, the microphone, or connected accounts. Although the flaw did not enable a remote attack on its own, it could have increased the impact of an existing Mac compromise.
What Muse users should do
Users of the macOS version of Muse should update the app as soon as the update is available in their installation. The hotfix is intended to reduce the immediate risk associated with the described technique, but it does not replace the usual protection of the device against locally executed malicious code.
A separate public Meta security bulletin with repair details, a version number, or a CVE was not found. Independent confirmation that the hotfix blocks Wardle’s method, as well as any evidence of exploitation in the wild, should also be monitored.
Sources
- The Verge – Reports the hotfix release and quotes David Singleton of Meta Superintelligence Labs on the local nature of the attack.
- Ars Technica – Describes the vulnerability mechanism, the requirement for locally running code, and the potential misuse of Muse’s access rights.
- Meta – Documents Muse’s stated functionality, integrations, and user access model.
Verified and updated: 09/22/2026 15:22
