PT-2025-29286 · Canonical · Multipass

Isaac Ordonez · Published 2025-07-11 · Updated 2026-05-28 · CVE-2025-5199

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Multipass versions up to and including 1.15.1

Description: Incorrect default permissions in Canonical Multipass on macOS allow a local attacker to escalate privileges by modifying files executed with administrative privileges by a Launch Daemon during system startup.

Recommendations: Update to a version later than 1.15.1.

Exploit

Fix

LPE

Incorrect Default Permissions

Incorrect Authorization

Weakness Enumeration

CWE-276

CWE-863

Related Identifiers

CVE-2025-5199

GHSA-2J82-P5CQ-62P3

Affected Products

Multipass

References · 9

• 🔥 https://github.com/canonical/multipass/security/advisories/GHSA-2j82-p5cq-62p3 · Exploit
• https://github.com/canonical/multipass/pull/4115 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-5199 · Security Note
• https://osv.dev/vulnerability/CVE-2025-5199 · Vendor Advisory
• https://t.me/cveNotify/165050 · Telegram Post
• https://twitter.com/CVEnew/status/1943820530957664481 · Twitter Post
• https://t.me/cvetracker/27604 · Telegram Post
• https://twitter.com/cracbot/status/1945800685687324888 · Twitter Post
• https://t.me/cvenotify/128665 · Telegram Post