jonny (nonvenomous) on Nostr: Whew, after a manic full day of confirming the vuln end to end, I can confidently say ...

Whew, after a manic full day of confirming the vuln end to end, I can confidently say this is a doozie. 0, 0.5, or 1 click account takeover of most muse instances from any malicious binary run without any special privileges on the VM. submitting the report now.