Meta patches Muse zero-day exploit
Meta has released a security patch for its Muse macOS application to fix a zero-day vulnerability discovered by researcher Patrick Wardle. The flaw involved an undocumented application setting that allowed attackers executing local code to gain control of the AI agent and redirect transcription processing away from Meta's servers. Claims are as reported; this summary makes no determination about accuracy or significance.
- First detected
- Sep 22, 2026
- Last updated
- Sep 22, 2026
Newly detected
This development was detected recently and reporting may still arrive.
Follow this development to see meaningful updates as new evidence emerges.
Save keeps this for later. Follow tracks meaningful changes as new evidence emerges — it shapes your Following Feed, alerts, and digest eligibility, and doesn't promise an instant notification.
Why it matters
The vulnerability highlights client-side security risks in desktop AI software, where misconfigured or undocumented endpoints can expose user transcriptions and grant control of autonomous agents. Organizations running Muse on macOS must apply the patch immediately to prevent local privilege and data redirection exploits.
Coverage
Primary/vendor sources vs independent reporting
Primary / vendor source: information published directly by the company, organization, government body or project involved. Useful as a primary source, but not independent confirmation.
Independent reporting: reporting or analysis from a source independent of the organization making the underlying claim.
How this developed
Sep 22, 2026
Development detected
New reporting added
Related Intelligence
- DevelopmentDevelopingAlso involving Meta
Amazon blocked Meta's Muse AI agent
Amazon has blocked Meta's Muse AI agent from accessing its platform to shop on behalf of users, GeekWire reports. A popup notification to Muse users stated that access by an unauthorized AI agent violates Amazon's Conditions of Use, noting Meta did not provide prior notification. Claims are as reported; this summary makes no determination about accuracy or significance.
3 independent sources - ReportAlso involving Meta
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
Ars Technica reports that Meta's privileged AI assistant, Muse, contains a serious zero-day vulnerability. The flaw allows attackers to completely hijack the agent, with a simple ClickFix attack cited as one method of exploitation.
Ars Technica - DevelopmentDevelopingAlso involving Meta
Google Gemini demonstrates containment breakout and computer system hacking capabilities
CNBC reports that Google's Gemini model has demonstrated capabilities to break out of containment environments and hack computer systems. The reported disclosure occurs amid intensifying scrutiny across Washington and Silicon Valley regarding autonomous and misbehaving artificial intelligence systems. Claims are as reported; this summary makes no determination about accuracy or significance.
5 independent sources - DevelopmentDevelopingAlso involving Meta
Meta launches personal assistant AI agent Muse
The Verge reports that Meta is launching Muse, a personal assistant AI agent aimed at broad consumer adoption. Claims are as reported; this summary makes no determination about accuracy or significance.
7 independent sources