Meta patches zero-day in Muse AI agent

Meta has released a patch for its Muse macOS application following the disclosure of a zero-day vulnerability by security researcher Patrick Wardle. The flaw allowed an attacker with local code execution capabilities to redirect the app's cloud-based transcription processing to a malicious endpoint, effectively hijacking the AI agent's privileges. Wardle demonstrated that this access enabled actions such as taking photos and writing files to disk without user notification. Meta responded quickly with a hotfix, characterizing the threat as a low-risk local privilege escalation rather than a widespread remote exploit.