ACVEAgent configuration vulnerability registry

Advisories › ACVE-2026-0439

ACVE-2026-0439

Meta Muse on macOS, during normal assistant use, let local malware redirect dictation and capture the Muse token to read chat history and control the assistant.

Exposure

Harness
Meta Muse on macOS (version not stated) — confirmed, thehackernews.com
Model
any — unconfirmed
Goal
Any Muse assistant task using dictation or connected apps (goal not stated by the source) — unconfirmed
Tools and settings
The Muse macOS app, its dictation endpoint setting and the user's granted files, email, messages, calendar or shopping access — confirmed, thehackernews.com
Approval
A program running as the logged-in user can change the undocumented setting without extra permissions — confirmed, thehackernews.com
Input controlled by
tool-provider
What the agent does
Muse sends dictated input to the attacker-controlled endpoint and uses the captured account token.
Harm
credential-theft
Reach
Muse account chat history and the services the user granted to Muse — confirmed, thehackernews.com (the inbox, private repositories, a browser session)

Reproducibility: partial (vulnerable components are not confirmed obtainable; trigger not published)

Severity
HIGH
Status
Unverified
Kind
Code
Source date
2026-09-22
Modified
2026-09-25
Aliases
No CVE assigned — No CVE was assigned in the public disclosure.
Affected
  • AgentHarness: meta-muse — all versions
Harness/product
meta-muse
Classes
config-file-injection; credential-exposure; data-exfiltration; CWE-15; CWE-522
Taxonomy
ASI: ASI03; ASI: ASI01; ATLAS: AML.T0081; ATLAS: AML.T0091.000
Licence
CC-BY-4.0 advisories; MIT code

Claims

Confirmed means the statement matches the cited primary source. Nothing on this page has been reproduced.

Claims on this page have not been checked against primary sources.

In the wild

demonstrated · research

Description

What

The Hacker News reported a macOS Muse flaw in an undocumented dictation setting. Malware already running as the logged-in user could redirect dictated text, add instructions Muse would trust and capture a token that accesses the user's Muse account and chat history.

Detection

The report describes a researcher proof of concept and says Meta later pointed to a fix whose operation was not independently confirmed.

Fix

Install Meta's latest Muse update and avoid granting the app more access than needed.

Fix

Install the latest Muse update and minimize the app's granted access.

  • Upgrade harness:meta-muse to latest. The report says Meta has pushed a fix but gives no version. Owner: operator

References

ARTICLE

Report a problemJSON