Patrick Wardle found a flaw in Muse that lets any macOS app grab the token and take full control of a user’s Meta assistant account.
