Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day

Researchers have identified a zero-day vulnerability in Muse, Meta’s AI assistant, which allows unauthorized parties to hijack the agent through a ClickFix attack. This exploit demonstrates a critical security flaw in the system's architecture, potentially enabling attackers to take control of user sessions.