PT-2025-48483 · Shirt Pocket · Shirt Pocket Superduper!

Published 2025-12-01 · Updated 2025-12-01 · CVE-2025-57489

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Shirt Pocket SuperDuper! version 3.10

Description An access control issue exists within the SDAgent component. This allows for privilege escalation to root level access due to the improper configuration of a setuid binary.

Recommendations Update to a newer version that addresses this access control issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-57489

Affected Products

Shirt Pocket Superduper!

References · 7

• https://osv.dev/vulnerability/CVE-2025-57489 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-57489 · Security Note
• https://shirtpocket.com/blog/index.php/shadedgrey/comments/superduper_security_update_v311 · Note
• https://twitter.com/CVEnew/status/1995519585475330552 · Twitter Post
• http://shirt.com · Note
• https://shirt-pocket.com/SuperDuper/SuperDuperDescription.html · Note
• https://t.me/CVEtracker/38548 · Telegram Post