VulnerabilitiesResearcher shows Meta Muse flaw can hijack dictation on macOS
A proof-of-concept published on 21 September 2026 shows local malware can point the AI assistant's dictation traffic at an attacker's server.
21 Sept 2026
Meta Muse macOS App Flaw Lets Local Malware Redirect Dictation Traffic
Security researcher Patrick Wardle disclosed a proof-of-concept local zero-day in Meta's Muse macOS app, showing an unprivileged local process can modify an undocumented setting to redirect dictation traffic to an attacker-controlled endpoint. This could expose dictated audio and prompts, enable prompt injection, and let local malware abuse whatever access the user has granted to Muse.
Disclosed 21 September 2026 · Record updated 1 October 2026
Impact
Local malware could redirect Muse's dictation traffic to an attacker-controlled endpoint, potentially exposing dictated audio and prompts, enabling prompt injection, theft of authentication material, and abuse of the app's granted permissions.
Our coverage
VulnerabilitiesSources
- theregister.comhttps://theregister.com/ai-and-ml/2026/09/21/meta-muse-ai-app-flaw-lets-local-malware-redirect-dictation-traffic/5297980