PT-2025-31677 · Unknown · Pearcleaner

Swayzgl1Tzyyy · Published 2025-08-01 · Updated 2025-08-03 · CVE-2025-54595

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pearcleaner versions 4.4.0 through 4.5.1

Description Pearcleaner is a macOS application cleaner. The PearcleanerHelper, a privileged helper tool bundled with the application, registers an XPC service (com.alienator88.Pearcleaner.PearcleanerHelper) that accepts unauthenticated connections from any local process. This service exposes a method that executes arbitrary shell commands, allowing local unprivileged users to escalate privileges to root after the helper is approved and active.

Recommendations Update to version 4.5.2 or later.

Exploit

Fix

LPE

Improper Privilege Management

OS Command Injection

Weakness Enumeration

CWE-269

CWE-78

Related Identifiers

CVE-2025-54595

GHSA-GR2J-65FH-8PVC

Affected Products

Pearcleaner

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54595.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-54595 · Security Note
• https://osv.dev/vulnerability/CVE-2025-54595 · Vendor Advisory
• https://github.com/alienator88/Pearcleaner/releases/tag/4.5.2 · Note
• https://github.com/alienator88/Pearcleaner/commit/69afadfa95791cb998118ca35c227007b230b984 · Note
• https://github.com/alienator88/Pearcleaner/issues/278 · Note
• https://github.com/alienator88/Pearcleaner/security/advisories/GHSA-gr2j-65fh-8pvc · Note
• https://twitter.com/UndercodeUpdate/status/1952124742195912965 · Twitter Post
• https://twitter.com/CVEnew/status/1951355934342521080 · Twitter Post