Security researchers find zero-day flaw letting local apps and terminal commands hijack Meta's Muse AI assistant; Amazon begins blocking Muse

Security researchers disclosed a zero-day vulnerability in Muse, Meta's macOS AI assistant, that lets locally run apps and terminal commands seize full control of the agent, bypassing the macOS permissions Muse had been granted (file writes, microphone, camera, location, calendar, and linked accounts such as WhatsApp and email). Separately, Amazon began blocking Muse from its site from Sunday. The report comes from Ars Technica; no CVE number, vendor advisory, proof-of-concept, or affected version range has surfaced yet.

If accurate, this is a real attack surface issue: any local app or script on a compromised or malicious-adjacent Mac could hijack an assistant with access to a user's calendar, messages, email and social accounts, not just a theoretical privacy concern. Security teams evaluating Muse or similar OS-level AI agents have a concrete reason to delay deployment or restrict permissions until Meta patches and confirms scope. The Amazon block is a useful external signal that a third party independently judged Muse risky enough to act on, though the report does not establish that Amazon's move was caused by this specific flaw.

The framing that this "undermines Zuckerberg's privacy claims" is editorial commentary, not new evidence, and the vulnerability report and the Amazon blocking are presented together without a shown causal link. Key details needed to judge severity are missing: no CVE, no researcher writeup or PoC, no disclosure timeline, no affected macOS or Muse version, and no confirmation Meta has acknowledged or patched it. Treat this as a single secondary-source account until primary documentation appears.

1. 01A CVE assignment or a vendor security advisory from Meta confirming the flaw and listing affected versions
2. 02A published researcher writeup or proof-of-concept demonstrating the exploit in detail
3. 03Confirmation of whether Amazon's blocking of Muse is explicitly tied to this vulnerability or a separate policy decision, and whether other platforms (browsers, app stores) follow suit