PT-2025-31890 · Unknown · Electroncapture

Swayzgl1Tzyyy · Published 2025-08-05 · Updated 2025-10-09 · CVE-2025-54871

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Electron Capture versions 2.19.1 and below

Description Electron Capture facilitates video playback for screen-sharing and capture. The elecap app on macOS allows local unprivileged users to bypass macOS TCC (Transparency, Consent, and Control) privacy protections by enabling the ELECTRON RUN AS NODE environment variable. This variable allows arbitrary Node.js code to be executed via the -e flag, which runs inside the main Electron context, inheriting any previously granted TCC entitlements (such as access to Documents, Downloads, etc.).

Recommendations Update to version 2.20.0 or later.

Exploit

Fix

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-54871

GHSA-8849-P3J4-JQ4H

Affected Products

Electroncapture

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54871.json · Exploit
• 🔥 https://github.com/steveseguin/electroncapture/security/advisories/GHSA-8849-p3j4-jq4h · Exploit
• https://github.com/steveseguin/electroncapture/commit/3837f54e75911bb99fa45cfa138a5e401d16f531 · Patch
• https://osv.dev/vulnerability/CVE-2025-54871 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54871 · Security Note
• https://github.com/steveseguin/electroncapture/releases/tag/2.20.0 · Note
• https://twitter.com/CVEnew/status/1952539716970287472 · Twitter Post
• https://t.me/CVEtracker/29159 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1952571658218181100 · Twitter Post
• https://t.me/cveNotify/138031 · Telegram Post