CVE-2025-31194

Description

An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A Shortcut may run with admin privileges without authentication.

Reserved 2025-03-27 | Published 2025-03-31 | Updated 2025-04-01 | Assigner apple

Problem types

A Shortcut may run with admin privileges without authentication

Product status

Any version before 15.4
affected

Any version before 14.7
affected

Any version before 13.7
affected

References

support.apple.com/en-us/122373

support.apple.com/en-us/122374

support.apple.com/en-us/122375

cve.org (CVE-2025-31194)

nvd.nist.gov (CVE-2025-31194)

Download JSON