Un-Mused: How a Single Debug Setting Bypassed macOS Security in Meta’s AI Client

Security researcher Patrick Wardle discovered a zero-day vulnerability in Meta's Muse desktop client for macOS that allowed unauthorized software to manipulate the application's permissions. By exploiting a specific debug setting, attackers could potentially compromise user input and account security. Meta has since released a hotfix to address the flaw.