Meta's Muse assistant exposed account-control token through local apps

A zero-day vulnerability in Meta's Muse assistant lets any locally installed app or terminal command redirect the service's transcription endpoint and capture the token that controls a user's Muse account, Ars Technica reported. The attack does not require the local process to hold the macOS permissions that Muse itself receives. Muse can access connected email, calendars, social accounts, files, the microphone, camera and location after users authorize it. Redirecting transcription to an attacker-controlled server exposes the authentication token, creating a path to control the assistant account. The report does not identify a patch or mitigation.