Based on reporting by The Verge.
What happened
Meta released a patch for its Muse macOS app addressing a zero‑day vulnerability that could allow attackers to take control of the AI agent.
The flaw, discovered by researcher Patrick Wardle, exploited an undocumented Muse setting that let local code redirect transcription processing to an attacker‑controlled endpoint.
Meta clarified the exploit required local access, not remote, making the practical risk to typical users low.
AIBeat analysis
This could mean that users who apply the update are protected from local privilege escalation, while devices running unpatched versions may remain vulnerable to attackers with local access.