Free tools Windows power users keep installed
One-click scans. No signup required.
The available reporting does not substantiate a claim of four separate critical flaws or establish Meta’s current response. It describes one vulnerability in the Mac version of Meta Muse: a local attacker who can already run code as the logged-in user could redirect the app’s dictation traffic. That is a serious reason to be cautious, but it is not a remote break-in that independently compromises a Mac.
What was reported about Meta Muse?
On September 22, 2026, The Hacker News reported that an undocumented preference named endo_voyager_dictation_endpoint could be changed by code running as the logged-in Mac user. Patrick Wardle’s proof-of-concept repository documents the same setting and local prerequisite: Wardle’s Muse proof of concept. The report concerns the Mac app; it does not establish that other Muse versions are affected.
As an Amazon Associate I earn from qualifying purchases.
If redirected, Muse’s dictation traffic could go to an attacker-controlled endpoint. A dictated prompt could therefore be exposed, and the attacker could add instructions to the response path that Muse trusts. The report also describes the possibility of capturing Muse authentication material and abusing permissions already granted to the assistant.
Does this establish four critical flaws?
No. The two sources describe one vulnerability and several potential consequences of exploiting it. They do not establish four distinct flaws, and the report provides no measured severity score. Calling each consequence a separate flaw would overstate what the report shows.
#1 Best Overall
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
What access would an attacker need?
The attacker must already be able to run code as the logged-in Mac user. The issue is therefore not, by itself, a way for a remote attacker to break into a Mac. The Hacker News report discusses ClickFix as a possible route to initial code execution, but that is a separate step from the Muse vulnerability.
In Wardle’s tests, a captured token could expose chat history and allow control of the assistant across devices. The demonstrated behavior has important limits: Muse drafted messages rather than sending them autonomously, and the report did not show an ability to bypass macOS protections against one app reading another app’s saved credentials. It also did not demonstrate that Meta’s cloud isolation had been broken. The concern is misuse of access already granted to Muse, not evidence of a cloud breach.
Rank #2
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Did Meta acknowledge or fix the issue?
The Hacker News report says Wardle did not report the vulnerability to Meta before public disclosure. It also says Meta later pushed a change Wardle called a “fix,” but the reporter could not confirm what the change did and said there was no published Meta security advisory at that time. Those are publication-time details, not confirmation of Meta’s current intent or patch status; current patch status is not established by the available sources.
What should Mac users do?
The report recommends these precautions:
- Quit or remove Muse if you do not want to keep using it while the issue’s status is unclear.
- Review Muse’s macOS permissions and revoke any it does not need.
- Avoid Muse voice input to close the demonstrated dictation trigger path.
- Do not paste commands into Terminal because a website or message tells you to.
- If you suspect the Mac may already be compromised, treat the Muse account and connected accounts as exposed and change their passwords.
These are precautions attributed to The Hacker News report, not the result of independent testing.
Rank #3
![Norton 360 Deluxe 2027 Antivirus, 3 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41qw3FS3qLL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
How cautious should you be about installing Muse?
The report provides a concrete reason to avoid voice dictation and to review permissions, especially if you cannot verify that your installed version includes an effective fix. It does not establish that every Muse installation has been compromised, that the flaw can be exploited without prior code execution, or that Meta’s cloud was breached. A decision to install should account for the unresolved patch status and the access you would grant the Mac app.
Quick Recap
Best Value
![Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41IYV5zGyCL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
Rank #4
![Norton 360 Premium 2027 Antivirus, 10 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41JNWru8mYL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 10 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
