Researcher discloses a Muse Mac app zero-day that lets local malware hijack the agent

macOS security researcher Patrick Wardle disclosed a zero-day in the Muse Mac app: another app on the same Mac could change the dictation transcription endpoint and take over the Muse account. Mashable reported on September 22 that Meta had not yet fixed it.

Who is affected:

People using the Muse app on a Mac.

Action needed:

Update the Muse Mac app and avoid running untrusted apps or pasted terminal commands.