PT-2025-25165 · Unknown · Ws.Stash.App.Mac.Daemon.Helper

Carlos Garrido · Published 2025-06-10 · Updated 2025-06-11 · CVE-2024-7457

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ws.stash.app.mac.daemon.helper (affected versions not specified)

Description The issue is caused by an incorrect use of macOS’s authorization model in the ws.stash.app.mac.daemon.helper tool. Instead of validating the client's authorization reference, the helper invokes AuthorizationCopyRights() using its own privileged context, effectively authorizing itself rather than the client. This allows unprivileged clients to invoke privileged operations via XPC, including unauthorized changes to system-wide network preferences such as SOCKS, HTTP, and HTTPS proxy settings. The absence of proper code-signing checks enables arbitrary processes to exploit this flaw, leading to man-in-the-middle (MITM) attacks through traffic redirection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2024-7457

Affected Products

Ws.Stash.App.Mac.Daemon.Helper

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-7457 · Security Note
• https://twitter.com/CVEnew/status/1932581584252625138 · Twitter Post
• https://t.me/cvetracker/25981 · Telegram Post
• https://pentraze.com · Note