Researcher Discloses Local Zero-Day in Meta's Muse macOS Agent

On Sept. 21, 2026, security researcher Patrick Wardle disclosed a local zero-day in Meta's Muse macOS app that can let unprivileged code redirect the assistant's dictation traffic and abuse access already granted to the agent. The public proof of concept, not-a-mused, says the attack requires local code execution, but could turn Muse's broad permissions into a privilege-amplification path rather than a simple app compromise.