Meta patches Muse zero-day exploit
Meta has released a security patch for its Muse macOS application to fix a zero-day vulnerability discovered by researcher Patrick Wardle. The flaw involved an undocumented application setting that allowed attackers executing local code to gain control of the AI agent and redirect transcription processing away from Meta's servers. Claims are as reported; this summary makes no determination about accuracy or significance.
- First detected
- Sep 22, 2026
- Last updated
- Sep 23, 2026
Moderate confidence
Based on a single independent report.
Limited corroboration
1 reporting source
What does this mean?
Corroboration measures how many genuinely independent sources support the event. Confidence measures how reliable the available evidence appears.
Stable
No recent reporting has materially changed the known facts.
Follow this development to see meaningful updates as new evidence emerges.
Save keeps this for later. Follow tracks meaningful changes as new evidence emerges — it shapes your Following Feed, alerts, and digest eligibility, and doesn't promise an instant notification.
Why it matters
The vulnerability highlights client-side security risks in desktop AI software, where misconfigured or undocumented endpoints can expose user transcriptions and grant control of autonomous agents. Organizations running Muse on macOS must apply the patch immediately to prevent local privilege and data redirection exploits.
Coverage
Independent reporting
Additional reporting
Primary/vendor sources vs independent reporting
Primary / vendor source: information published directly by the company, organization, government body or project involved. Useful as a primary source, but not independent confirmation.
Independent reporting: reporting or analysis from a source independent of the organization making the underlying claim.
How this developed
Sep 23, 2026
New reporting added
Meta’s Muse AI Assistant Rolled Out With a Serious Security FlawWIREDAdditional reporting
Sep 22, 2026
Development detected
New reporting added
Meta patches Muse exploit that let attackers control the AI agentThe VergeIndependent reporting
Related Intelligence
- ReportAlso involving Meta
OpenAI launches Dots, its Muse competitor
During its DevDay keynote, OpenAI announced Dots, an agentic assistant powered by its GPT-6 Astra model. Designed to compete with Meta's Muse AI, Dots operates as an always-on background system capable of executing tasks across connected applications while continuously learning user preferences over time.
The Verge - ReportAlso involving Meta
Meta’s Muse just stole the AI spotlight from OpenAI and Anthropic
TechCrunch reports a rapid succession of frontier AI releases, including Anthropic's rollout of Opus 5.5 and OpenAI's release of GPT-6 updates. Concurrently, Meta's personal AI agent Muse is reportedly outpacing early ChatGPT metrics as Meta prepares to deploy it on smart glasses.
TechCrunch - ReportAlso involving Meta
Will Meta’s AI Tamagotchi bet is…working?
Anthropic launched Opus 5.5 while OpenAI released updates to its GPT-6 models shortly thereafter. Amid these releases, Meta is reportedly seeing strong initial adoption for its personal AI agent, Muse, which is outpacing ChatGPT's early metrics and is slated for deployment on smart glasses.
TechCrunch - ReportAlso involving Meta
Meta launches enterprise AI platform, hires MongoDB CEO to lead new initiative
Meta has introduced an enterprise AI platform and hired MongoDB's former CEO to direct the initiative. The company reports it will provide its technology stack—including Muse, Meta Business Agent, Muse API, and Muse Code—to commercial enterprises and software developers.
TechCrunch