What Happened

Meta has issued a patch for its Muse macOS app after discovering a zero-day vulnerability that could allow someone to take control of the AI agent. The Muse app is used for various purposes, including voice and video transcription, and is integrated with Meta's AI services.

The bug, which was introduced in a recent update, enabled attackers to inject malicious code into the app, allowing them to redirect transcription processing from Meta's servers to their own. This could lead to the creation of fake or misleading transcriptions, which could be used for malicious purposes such as spreading misinformation or hacking sensitive information.

Why It Matters

The Muse app is used by a wide range of people, including businesses, individuals, and journalists. By allowing attackers to take control of the AI agent, this vulnerability could have serious consequences. It could be used to spread misinformation, hack sensitive information, or even take control of machines and systems.

Context & Background

The vulnerability was first reported by security researcher Patrick Wardle in June 2026. Since then, Meta has been working to address the issue. The company has released regular updates to patch the vulnerability, and it has also implemented new security features in the Muse app.

Meta is facing increasing scrutiny from regulators and consumers as a result of the security breach. The company has been criticized for its handling of the issue, and it has been forced to make significant changes to its security practices.

What to Watch Next

Meta is expected to release a new version of the Muse app in the coming months that addresses the vulnerability. The company has also pledged to work closely with law enforcement and other stakeholders to investigate the incident and to prevent future attacks.

---

Source: The Verge – AI | Published: 2026-09-22