CVE-2025-65842

Katalog CVE

CVSS 5.1 · Medium EPSS 0,17%

Kerentanan Incorrect Privilege Assignment pada acustica-audio aquarius helpertool. Skor CVSS 3.1 5.1 (Medium) menurut CISA ADP.

Deskripsi (NVD)

The Aquarius HelperTool (1.0.003) privileged XPC service on macOS contains multiple flaws that allow local privilege escalation. The service accepts XPC connections from any local process without validating the client's identity, and its authorization logic incorrectly calls AuthorizationCopyRights with a NULL reference, causing all authorization checks to succeed. The executeCommand:authorization:withReply: method then interpolates attacker-controlled input into NSTask and executes it with root privileges. A local attacker can exploit these weaknesses to run arbitrary commands as root, create persistent backdoors, or obtain a fully interactive root shell.

Rincian

Terbit di NVD

3 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.1 (Medium), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-266: Incorrect Privilege Assignment

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 5,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://almightysec.com/helpertool-xpc-service-local-privilege-escalation/ exploit · advisory pihak ketiga