CVEvulnerability

CVE-2025-69604

7.8 HIGH Published 2026-01-29 Modified 2026-07-05 Official page ↗
Status
Modified
Published
2026-01-29
Last modified
2026-07-05
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-276

Description

An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls.

Affected configurations

• shirt-pocket superduper\! (< 3.12)

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References