PT-2025-23598 · Parallels · Parallels Desktop For Mac

Kpc Of · Published 2025-06-03 · Updated 2025-06-03 · CVE-2024-54189

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Parallels Desktop for Mac version 20.1.1 (build 55740)

Description A privilege escalation issue exists in the Snapshot functionality of Parallels Desktop for Mac. When a snapshot of a virtual machine is taken, a root service writes to a file owned by a normal user. By using a hard link, an attacker can write to an arbitrary file, potentially leading to privilege escalation.

Recommendations For Parallels Desktop for Mac version 20.1.1 (build 55740), consider disabling the Snapshot functionality until a patch is available to prevent potential privilege escalation. Restrict access to the root service that writes to files owned by normal users to minimize the risk of exploitation. Avoid using hard links in the Snapshot functionality to prevent attackers from writing to arbitrary files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Link Following

Weakness Enumeration

CWE-59

CWE-62

Related Identifiers

CVE-2024-54189

Affected Products

Parallels Desktop For Mac

References · 8

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2024-2124 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-54189 · Security Note
• https://osv.dev/vulnerability/CVE-2024-54189 · Vendor Advisory
• https://t.me/cvetracker/25261 · Telegram Post
• https://t.me/cvenotify/124450 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1929850066317029738 · Twitter Post
• https://t.me/cvenotify/124443 · Telegram Post
• https://twitter.com/CVEnew/status/1929838768108064850 · Twitter Post