Zero-day in Mac AI assistant Muse can leak prompts and credentials

Security researcher Patrick Wardle disclosed a zero-day in the consumer Mac AI agent Muse: an unprivileged local process can alter hidden settings and exfiltrate user prompts and credentials, effectively turning it into a backdoor.

2026-09-22 ~ 2026-09-22 · 2 related posts

• Muse Mac AI agent has 0-day flaws that turn it into 'the ultimate backdoor', researcher warns — nptacek · 2026-09-22
• Zero-day hits Meta's Muse for Mac: local process can steal prompts, auth tokens and file access — MicahBerkley · 2026-09-22