All news

Zero-day vulnerability found in Meta's Muse SI agent for Mac: any app on the computer could take over the agent

Prepared by Sintelligent with the help of SI. Publication time restored from the build log. . Updated: .

The more access a personal SI agent gets, the costlier any hole in it becomes, and agent security is becoming the main condition for their mass rollout.

Researcher Patrick Wardle showed that an undocumented Muse setting that specifies the dictation transcription server is accessible to any local process: by redirecting traffic to their own server, an attacker obtains voice commands and the account login token. After that, they get all of the agent's permissions: WhatsApp, email, calendar, files, microphone, camera and geolocation; Wardle called Muse a "perfect backdoor" and in a demo made it record files and secretly take photos. The attack requires code execution on the computer, but Wardle believes a simple ClickFix trick is enough; Meta released a fix after about 12 hours.

Sources 1

malwarebytes.com
History

Meta Muse agent: launch, growth and risks

19 events
  1. Meta brings back sharing in Muse: published "artifacts" get new addresses after researchers found links through public DNS
  2. Meta Muse's "share conversation" links turned out to be easy to find: researchers located 6,800 other people's chats, and Meta paused the feature
  3. NYT: Zuckerberg judged the Muse SI agent ready to launch despite the risks
  4. Meta's Muse keeps a file on the user's loved ones and, by its own instructions, obeys the user even against its own safety rules
  5. WSJ: 29-year-old Alexandr Wang has become the face of Meta's SI strategy and boosted the Muse assistant
  6. Meta opens code for DIY devices with its Muse SI agent: from displays to buttons on Raspberry Pi
  7. Apple to tighten app access to all Mac files: SI agents will need explicit permission
  8. Meta's Muse agent gave a buyer a seller's home address on Marketplace, and the buyer showed up at the seller's apartment
  9. Meta launches Muse for Small Business: the agent connects to Shopify, Stripe, Slack, Intuit and Meta ad accounts
  10. Meta opens an enterprise unit around Muse and hires the head of MongoDB to run it
  11. Meta's Muse app is No. 1 on the App Store and Google Play: 3.4 million downloads and audience growth after Connect
  12. Meta at Connect bets on the Muse agent: it is coming to glasses, and a camera-free pair of glasses and the Muse Charm device were also shown
  13. Meta admits Muse is "heavily inspired" by the open agent OpenClaw, down to identical system files
  14. Zero-day vulnerability found in Meta's Muse SI agent for Mac: any app on the computer could take over the agentOpen now
  15. Amazon closes its store to Meta's Muse SI agent, while Shopify, by contrast, opens payments to it across all its stores
  16. Meta releases Muse for Mac: an agent that works with your files, email, calendar and messages on its own
  17. SI agents Instinct and Meta Muse learn to call restaurants and clinics on their own
  18. Meta's Muse agent becomes the second most popular app in the US App Store
  19. Meta launches Muse, a personal SI agent that writes emails, books trips and makes purchases on its own
Follow on Telegram