PT-2026-22743 · Iboysoft · Iboysoft Ntfs For Mac

Oscar Uribe · Published 2026-03-03 · Updated 2026-04-27 · CVE-2026-2637

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions iBoysoft NTFS for Mac version 8.0.0

Description iBoysoft NTFS for Mac contains a local privilege escalation issue in its privileged helper daemon, ntfshelperd. The daemon exposes an NSConnection service that operates with root privileges without implementing any authentication or authorization checks. This allows for potential unauthorized access and control over the system.

Recommendations Update iBoysoft NTFS for Mac to a version with the fix. As a temporary workaround, consider disabling the ntfshelperd daemon until a patch is available.

Exploit

Fix

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2026-2637

Affected Products

Iboysoft Ntfs For Mac

References · 7

• 🔥 https://fluidattacks.com/advisories/cuarteto · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-2637 · Security Note
• https://twitter.com/fluidattacks/status/2046714595151077745 · Twitter Post
• https://twitter.com/CVEnew/status/2028849471136874990 · Twitter Post
• https://t.me/cveNotify/161066 · Telegram Post
• https://iboysoft.com/ntfs-for-mac · Note
• https://t.me/CVEtracker/46213 · Telegram Post