Meta's Muse AI Assistant Has a Critical 0-Day; Amazon Moves to Block It

Meta's Muse AI assistant, which carries elevated system privileges, has been found to contain a serious zero-day vulnerability that could expose users and platforms to significant security risk. The flaw is particularly concerning given Muse's deep integration with shopping and commerce workflows, where it operates with access to sensitive user data and transaction systems. Amazon has responded by blocking Muse from its platform, signaling that major tech gatekeepers are willing to act unilaterally when AI agent security is in question. For developers building or integrating AI agents with broad permissions, this incident is a concrete case study in why the principle of least privilege matters — agentic systems with wide access are high-value targets. Until a patch is confirmed, any application relying on Muse APIs should be audited for exposure.