Meta's Muse AI Assistant Vulnerable to Zero-Day Exploit Allowing Full Account Control

While Muse is designed to handle tasks such as booking appointments and managing social media, it requires broad permissions on macOS to access files, microphones, and calendars. The vulnerability allows an attacker to redirect transcription requests to a malicious server, capturing the authentication token used for the Muse account. Wardle demonstrated proof-of-concept attacks that can write malicious files to disk or capture images without notifying the user.

"Instead of us having to write a very comprehensive Mac malware stealer, we can just leverage the AI assistant itself," Wardle told Ars Technica. He noted that the design choice to perform transcription in the cloud, rather than on-device, facilitated the exploit.