Meta Muse hidden settings vulnerability can hijack voice commands
Start here
Panda Security reports that security researcher Patrick Wardle disclosed a local privilege escalation vulnerability in the Meta Muse macOS client: malicious code must already be running under the logged-in user account to potentially use the assistant's existing privileges to expose voice, authentication materials, and associated device information, and it is not a remote attack that requires no device access. The report states that Meta has released a hotfix, and uses this to discuss the protection risks posed by the concentration of privileges in AI assistants.
Generated by AI from reports · Updated 4 days ago
Progress timeline
- Panda SecurityMeta Muse hidden settings vulnerability lets attackers hijack AI assistant voice commands
Panda Security reports that Patrick Wardle disclosed a local privilege escalation vulnerability in the Meta Muse macOS client. Malicious code must already be running under the logged-in user account to potentially use the assistant's existing privileges to expose voice, authentication materials, and associated device information; this is not a remote attack that requires no device access. The report states that Meta has released a hotfix, and uses this to discuss the protection risks posed by the concentration of privileges in AI assistants.
Related discussion
Attention trend
New sources per day
- Oct 5New1 sources (1 outlets,0 accounts)
- Oct 6New0 sources (0 outlets,0 accounts)
- Oct 7New0 sources (0 outlets,0 accounts)
- Oct 8New0 sources (0 outlets,0 accounts)
- Oct 9New0 sources (0 outlets,0 accounts)
- Oct 10New0 sources (0 outlets,0 accounts)
- Oct 11New0 sources (0 outlets,0 accounts)
- Oct 12New0 sources (0 outlets,0 accounts)
- Oct 13New0 sources (0 outlets,0 accounts)