important · Agent authority — macOS
Ordinary Mac software could redirect Meta Muse dictation and capture the agent's credentials.
Affects
Meta Muse, a personal AI agent whose macOS client controls a cloud agent and user-authorized apps, services and linked devices.
An unprivileged process could rewrite Muse's dictation endpoint, but credential capture still required the victim to use voice dictation afterward.
Detail and 5 sources
The credential could then expose sessions and authority already granted across connected services and devices; the researcher demonstrated device location and Bluetooth Low Energy scans.
Sources
ResearchOne Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a BackdoorResearchIntroducing Muse: The World’s First Personal AI Agent Built for EveryoneResearchHow We Built Safety Into Muse | Meta AI ResearchResearchMeta dice haber corregido falla de Muse que exponía tokens | QoreCode / PoCGitHub - pwardle/not-a-mused: Not a Mused · GitHub