Account hijacking flaw found in Meta’s Muse for macOS; hotfix releasedMachine translation
Automatically verified and published · Generated and evidence-checked automatically; not reviewed by a human.
Security researcher Patrick Wardle found that an undisclosed Muse voice configuration setting could be changed by an app or script running with the user’s permissions. An attacker could use it to intercept voice commands and an authentication token, then control the signed-in account and its connected apps. Meta says it has removed the setting in a hotfix.
Why it matters
漏洞将可修改的语音配置项与账户认证 Token 联系起来，影响可能延伸至 Muse 已获授权的关联应用。
The complete source text is not yet available.
Read at the original source