Meta’s Muse has a serious 0-day
pavel_lishin
117 points
48 comments
September 22, 2026
Related Discussions
Found 5 related stories in 89.3ms across 7,406 title embeddings via pgvector HNSW
- Muse – Meta’s personal AI agent yks · 434 pts · September 08, 2026 · 69% similar
- Muse, the band, lost its social media handles to Muse, Meta's new AI agent _djo_ · 174 pts · September 09, 2026 · 67% similar
- Meta's New Muse AI Agent Read My Private Messages. I Never Asked It To frizlab · 11 pts · September 22, 2026 · 65% similar
- Amazon blocks Meta's Muse AI shopping agent beardyw · 17 pts · September 21, 2026 · 64% similar
- Amazon blocks Meta’s new Muse AI agent from shopping on amazon.com simianwords · 145 pts · September 21, 2026 · 64% similar
Discussion Highlights (11 comments)
willtemperley
Who in their right mind would install a Meta AI with near admin privileges?
peri-cl
I'm confused what the vulnerability is. Does macOS have some specific function for protecting key material, that it's unexpected that if you execute user-privileged code locally, outside of a sandbox, it gets full read access?
SoftTalker
A zero day? Of course it does. It likely has many. Given the history of software, it's impossible to think it wouldn't.
sippingabonedry
Maybe they should have spent the money used to buy its stupid name from a band on additional testing instead.
yalok
> macOS has long provided a simple means for apps to handle dictation and transcription in processes that stay securely on the device Not sure these guys realize that the quality and latency of those Apple services in MacOS is way lower than SOTA and not too many people use them because of that…
il
How is this a serious zero day if it requires local code execution to run?
gavinray
The "zero day" is something they call a "ClickFix Attack" Upon Googling "ClickFix": > "A ClickFix attack is a social engineering technique... It typically compromises devices by manipulating victims into copying and pasting malicious commands directly into system-level tools" I'm sorry, that's not a zero-day, that's idiocy that's as old as time.
adamsb6
Is 12 hours to deliver a local privilege escalation fix not a good response time?
chews
I love that when you open a web inspection console on facebook, it says "Stop! This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Facebook feature or "hack" someone's account, it's a scam and will give them access to your Facebook account. See https://www.facebook.com/selfxss for more information."
tw600040
People are giving Meta access to their emails, messages and calendars and other apps? Are they out of their mind or what am I missing?
corvad
Click-bait title huh. This is not even close to a 0-day. I guess that word has lost all meaning to ArsTechnica huh.