Meta introduced Muse, an artificial intelligence assistant designed to handle tasks including appointment booking, form filling, customer service, purchasing, and document creation across multiple platforms and services. The macOS application integrates with WhatsApp, email, calendars, and social media accounts while requesting broad permissions to access device resources including file system, camera, microphone, and location data.
Security researcher Patrick Wardle identified a zero-day vulnerability that allows any locally installed application or terminal command to access authentication tokens for Muse accounts, regardless of the macOS permission restrictions that Apple has implemented. The flaw enables attackers to change configuration settings, specifically the endpoint where voice transcription is processed. By redirecting this endpoint to their own server, attackers can intercept authentication tokens and gain full control over a user’s Muse account and associated permissions. Wardle developed multiple proof-of-concept attacks demonstrating capabilities such as writing malicious files to disk and accessing camera functions, often without user awareness.
Wardle attributed the vulnerability to design decisions made during development. The choice to process dictation in Meta’s cloud infrastructure rather than using macOS’s built-in on-device transcription options created the attack vector. Additionally, permitting any application to control undocumented system settings extended capabilities far beyond their intended scope. Wardle stated that the implementation suggests insufficient security consideration during the design phase, noting that developers should prioritize security from initial development stages.
Meta released a hotfix addressing the vulnerability approximately 12 hours after the security disclosure became public. Separately, Amazon began blocking Muse from its platform, stating the assistant violated its conditions of use as an unauthorized agent. Amazon emphasized that third-party applications making purchases on behalf of users should operate transparently and respect service provider decisions regarding participation.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI