Security researcher shows hidden Muse setting could let attackers turn Muse into backdoor
Security researcher Patrick Wardle released a proof‑of‑concept on September 21 showing that a hidden preference in Meta's Muse assistant for macOS can be changed to redirect voice dictation to an attacker‑controlled endpoint. The setting, stored under the name endovoyagerdictationendpoint, can be altered by any program running as the logged‑in user, allowing the attacker to read what the user…
Key points
- The hidden preference endovoyagerdictationendpoint can be altered to send Muse dictation to an attacker‑controlled address.
- Attack requires code execution as the logged‑in user, then can read dictation, inject instructions, and steal the Muse session token.
- No patch exists; users should quit or remove Muse, review its permissions, avoid voice input, and change passwords if compromised.
Wardle demonstrated that with the stolen token he could control Muse on other devices, such as an iPhone, to reveal location, scan Bluetooth devices, and list smart‑home commands. The attack does not bypass macOS protections on passwords and does not compromise Meta's cloud isolation. No fix is available yet, and Wardle advises users to quit or uninstall Muse, audit its permissions, avoid voice input, and change passwords on linked accounts if they suspect compromise.
The story so far
3 episodes →- Security researcher shows hidden Muse setting could let attackers turn Muse into backdoorthis story
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
thehackernews.com · 21 September 2026
Loading the full article…
This text was published by thehackernews.com and written by The Hacker News. It is reproduced here with attribution so you can read it in full; the rights remain with the publisher. Read it at the source ↗
Coverage and discussion
3sources- Meta’s Muse AI Assistant Rolled Out With a Serious Security FlawPress · Wired AI ·
- Meta patches Muse exploit that let attackers control the AI agentPress · The Verge AI ·
The headline, key points and digest above were generated by Digest AI's editorial model from the linked sources. Automated summaries can contain errors: the sources are the record. Spotted a mistake? Tell us. Published by Martin K., who runs Digest AI and handles corrections.
More in Agents & Tools
All →- Gemini may delete existing text when asked to append, author reports · 1 src
- Google's Gemini outperforms ChatGPT and Claude as Android assistant · 1 src
- Meta launches Muse AI agent in Mexico, first in Latin America · 11 src
- Meta rolls out real-time voice and expressive avatars for Muse AI in the US · 7 src
- Meta improves Muse and Meta AI with Active Memory and Active Focus · 2 src
Comments
via GitHub Discussions