Meta Muse zero-day let local apps hijack assistant accounts; hotfix released
Summary
Researcher Patrick Wardle found that local apps or commands could redirect Muse’s cloud transcription and expose its account token, enabling account control. Meta said it released a hotfix patching the flaw.
Key points
- Patrick Wardle reported that any locally installed app or executed command could modify Muse's undocumented settings, regardless of its macOS permissions.
- By changing the endpoint for cloud transcription, an attacker could send the Muse account token to an attacker-controlled server.
- Wardle said proof-of-concept attacks could use Muse's privileges to write malicious files or take pictures, in some cases without an alert.
- The article describes a ClickFix-style social-engineering scenario that could help trigger the attack; Meta characterized the flaw as not being a remote exploit.
- Meta said it released a hotfix that patched the zero-day more than 12 hours after the article was published.
- The article also reports that Amazon began blocking Muse from shopping on its site, citing its Conditions of Use.
Article Details
- Vulnerability Types
- Local privilege escalation
- Improper access control
- Authentication token exposure
- Exploitation Status
- reported
- Exploit Availability
- unknown
- Patch Status
- available
MITRE ATT&CK
T1059.004 · Unix ShellWardle demonstrated using a terminal command to send a prompt to the Meta endpoint.T1528 · Steal Application Access TokenChanging Muse's transcription endpoint causes the account-authentication token to be sent to the attacker's endpoint.T1557 · Adversary-in-the-MiddleAn attacker can place a server proxy between the Muse user and Meta's endpoint, altering the prompt sent through the connection.
People
Vendors
AppleApple has spent years developing these defenses to prevent installed apps or commands entered into the terminal from accessing these resources, clearly because the company considers them a security threat.MetaMeta founder and CEO Mark Zuckerberg has gone to great lengths to hype the security of its new AI assistant, Muse, claiming it is “built from the ground up for privacy and security.” A zero-day vulnerability that gives
Products
macOSpurchases, generate images, create documents, and connect with your favorite apps and services.” The macOS app (curiously, there’s no Windows version) also works with a user’s WhatsApp, email, calendar, and socialMusefounder and CEO Mark Zuckerberg has gone to great lengths to hype the security of its new AI assistant, Muse, claiming it is “built from the ground up for privacy and security.” A zero-day vulnerability that gives