Mark Zuckerberg · Meta · Apple · Wired
Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw
Compiled by KHAO Editorial — aggregated from 1 source. See llms.txt for citation guidance.
◌ Single Source
Meta founder and CEO Mark Zuckerberg has gone to great lengths to hype the security of its new AI assistant, Muse, claiming it is “built from the ground up for privacy and security.” A zero-day vulnerability that gives locally run apps and terminal commands complete control of the agent raises serious doubts.
Key facts
- More than 12 hours after this post went live, Meta said it released a hotfix that patched the 0-day
- The Meta posts are likely mindful of the resulting blowback and the calls to slow down AI development in response
- When a task requires a tool that doesn’t exist, Muse creates one on the fly
- Of course, for Muse to do any of these things, users must first give it access to their accounts
Summary
Meta introduced Muse a few weeks ago. Of course, for Muse to do any of these things, users must first give it access to their accounts. The zero-day allowed any app or terminal command to gain access to the token that authenticates users to their Muse account. Meta developers designed the assistant so that any locally installed app or executed code, regardless of the macOS permissions it has, can change a long list of undocumented settings. Attackers could have exploited this flaw by changing the location to their own end point.