PT-2025-38405 · Aibattery · Aibattery

Swayzgl1Tzyyy · Published 2025-09-18 · Updated 2025-09-18 · CVE-2025-10672

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AIBattery versions up to 1.0.9

Description A vulnerability exists in AIBattery that results in missing authentication. The issue is located in an unknown function within the AIBatteryHelper/XPC/BatteryXPCService.swift file of the com.collweb.AIBatteryHelper component. Exploitation requires local access. The exploit for this issue has been made public.

Recommendations AIBattery versions prior to 1.0.9 should be updated.

Exploit

Fix

Missing Authentication

Improper Authentication

Weakness Enumeration

CWE-306

CWE-287

Related Identifiers

CVE-2025-10672

Affected Products

Aibattery

References · 8

• 🔥 https://github.com/SwayZGl1tZyyy/n-days/blob/main/AIBattery-Charge-Limiter/README.md · Exploit
• 🔥 https://github.com/SwayZGl1tZyyy/n-days/blob/main/AIBattery-Charge-Limiter/README.md#proof-of-concept · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10672 · Security Note
• https://twitter.com/CVEnew/status/1968718089425739921 · Twitter Post
• https://vuldb.com/?ctiid.324793 · Note
• https://vuldb.com/?submit.653159 · Note
• https://twitter.com/CveFindCom/status/1968686268377670001 · Twitter Post
• https://vuldb.com/?id.324793 · Note