CVE-2025-10751 | THREATINT

Description

MacForge contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.This issue affects MacForge: 1.2.0 Beta 1.

PUBLISHED Reserved 2025-09-19 | Published 2025-10-04 | Updated 2025-10-17 | Assigner Fluid Attacks

CRITICAL: 9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Problem types

CWE-732 Incorrect Permission Assignment for Critical Resource

Product status

Default status

unaffected

1.2.0 Beta 1

affected

References

fluidattacks.com/advisories/m83 exploit

fluidattacks.com/advisories/m83 third-party-advisory

github.com/MacEnhance/MacForge product

www.macenhance.com/macforge product

cve.org (CVE-2025-10751)

nvd.nist.gov (CVE-2025-10751)

Download JSON