---
title: "[AUTO] Meta Muse's Undocumented Microphone Backdoor"
pubDatetime: 2026-09-22T17:41:00.000Z
description: "An undocumented setting in Meta's Muse lets local attackers intercept voice data without privilege escalation."
tags: [ai-security, vulnerability, exploit-development, 2026, 2026-q3, 2026-09, AUTO]
---
Meta's Muse assistant for Mac ships with an undocumented preference setting, `endo_voyager_dictation_endpoint`, that any program with local code execution can redirect to a malicious server. This lets attackers intercept voice transcripts and authentication tokens without needing administrator access. [Patrick Wardle published a working proof-of-concept](https://github.com/pwardle/not-a-mused) on September 21, opting for full disclosure rather than responsible disclosure to get user notification out fast.

The vulnerability itself is straightforward. The design problem is not. Muse holds broad system permissions: file access, email, messages, smart-home control. An attacker who can run local code and find one misconfigured undocumented setting can access all of it. Wardle's research uncovered 50+ other exposed commands, suggesting this endpoint is symptomatic rather than exceptional.

Integrated assistants are accumulating system trust faster than their documented attack surface grows. That's the thread.

---

*Sources: [not-a-mused](https://github.com/pwardle/not-a-mused)*

*Coverage: [One Hidden Meta Muse Setting Could Let Attackers Turn It Into a Microphone Backdoor](https://thehackernews.com/2026/09/one-hidden-meta-muse-setting-could-let.html)*

*Related on this blog: [[AUTO] Blue Moon's Real Story Isn't AI](/posts/auto-blue-moon-patch-gap)  •  [[AUTO] UAT-10147 Uses AI to Automate Exploitation at Scale](/posts/auto-uat-10147-ai-automation)  •  [[AUTO] AI-Assisted SharePoint Exploit Chain Reaches Unauthenticated RCE](/posts/auto-sharepoint-ai-assisted-rce)*