PT-2025-48950 · Aquarius · Aquarius Desktop

Simon Bertrand · Published 2025-12-03 · Updated 2025-12-03 · CVE-2025-65843

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Aquarius Desktop version 3.0.069

Description Aquarius Desktop for macOS has an issue with how it handles files. The application does not properly check files when creating support archives, specifically when dealing with symbolic links within the ~/Library/Logs/Aquarius directory. It follows these links as if they were normal files. This allows a local attacker to potentially read or change files they shouldn't have access to by placing specially crafted symbolic links. If combined with another issue related to elevated privileges (HelperTool), even files owned by the root user could be exposed. The application uses a JUCE directory iterator to enumerate logs and writes file data without verifying if the target is a symbolic link.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

LPE

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2025-65843

Affected Products

Aquarius Desktop

References · 6

• 🔥 https://almightysec.com/insecure-file-handling-via-symlink · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-65843 · Security Note
• https://osv.dev/vulnerability/CVE-2025-65843 · Vendor Advisory
• https://t.me/CVEtracker/38768 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1996280347206541612 · Twitter Post
• https://twitter.com/CVEnew/status/1996268283536765432 · Twitter Post