---
format: "aidr-story-markdown/v1"
id: "6af58b306bcd0e6ef5bc084083da9f23257a1ab8d62f3399f09a1fcc42c24b3c"
canonical_url: "https://aidr.today/6af58b30?lang=en"
title: "Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day"
lang: "en"
requested_lang: "en"
available_langs: ["en","vi"]
translation_fallback: null
fallback_fields: []
published_at: "2026-09-22T14:35:15.000Z"
category: "Agents"
topics: ["meta","agent","safety","security","vulnerability"]
source_urls: ["https://arstechnica.com/security/2026/09/muse-metas-extraordinarily-privileged-ai-assistant-has-a-serious-0-day/","https://news.ycombinator.com/item?id=49802030"]
summary: "A simple ClickFix attack is only one way to completely hijack the new agent."
---

# Muse, Meta's extraordinarily privileged AI assistant, has a serious 0\-day

> [Open the canonical story](<https://aidr.today/6af58b30?lang=en>)

**Published:** 2026-09-22T14:35:15.000Z
**Category:** Agents
**Topics:** meta, agent, safety, security, vulnerability

## Summary

A simple ClickFix attack is only one way to completely hijack the new agent\.

## Sources

- [Story source](<https://arstechnica.com/security/2026/09/muse-metas-extraordinarily-privileged-ai-assistant-has-a-serious-0-day/>)
- [Discussion](<https://news.ycombinator.com/item?id=49802030>)