Definition
ClickFix is a social-engineering attack technique that tricks users into running malicious commands or code on their own machine, often via fake troubleshooting instructions. Once local code execution is achieved, further exploitation becomes possible.
Key Points
- 2026-09-21: patrick-wardle demonstrated ClickFix-style variant sufficient to hijack muse authentication token via endpoint redirection (2026-09-21-meta-muse-zero-day-vulnerability)
- Relevant to privileged agentic-ai assistants where local compromise amplifies agent permissions