PT-2024-36614 · Tabby · Tabby

Senzee1984 · Published 2024-12-26 · Updated 2024-12-30 · CVE-2024-55950

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Tabby versions prior to 1.0.216

Description The Tabby terminal emulator contains overly permissive entitlements that are unnecessary for its core functionality and plugin system, creating potential security vulnerabilities. The application holds powerful permissions including camera, microphone access, and the ability to access personal folders through Apple Events. The concerning entitlements are com.apple.security.cs.allow-dyld-environment-variables and com.apple.security.cs.disable-library-validation, which enable code injection.

Recommendations For versions prior to 1.0.216, review and remove at least one of the entitlements (com.apple.security.cs.disable-library-validation or com.apple.security.cs.allow-dyld-environment-variables) to prevent DYLD INSERT LIBRARIES injection while maintaining full application functionality. Update to version 1.0.216 or later to fix the vulnerability.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2024-55950

GHSA-JX33-9JC7-24GC

Affected Products

Tabby

References · 13

• 🔥 https://github.com/Eugeny/tabby/security/advisories/GHSA-jx33-9jc7-24gc · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/55xxx/CVE-2024-55950.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-55950 · Security Note
• https://osv.dev/vulnerability/CVE-2024-55950 · Vendor Advisory
• https://github.com/Eugeny/tabby/commit/e1e6e1cdab0310a881e36afd7c2744e5f905518b · Note
• https://twitter.com/Dinosn/status/1873586726440243693 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1873549915034681604 · Twitter Post
• https://t.me/pentestingnews/54726 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1872410874108850256 · Twitter Post
• https://twitter.com/CveFindCom/status/1872402446477082960 · Twitter Post
• https://t.me/cvedetector/13698 · Telegram Post
• https://twitter.com/CVEnew/status/1872405275589898543 · Twitter Post
• https://twitter.com/senzee1984/status/1872531969763893628 · Twitter Post