Beveiligingsadvies

CVE-2025-9474

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-26 05:02:09
Laatst bijgewerkt 2025-09-05 17:10:11
Toegewezen door VulDB
CVSS-score 4.5
Status PUBLISHED

Beschrijving

A vulnerability was detected in Mihomo Party up to 1.8.1 on macOS. Affected is the function enableSysProxy of the file src/main/sys/sysproxy.ts of the component Socket Handler. The manipulation results in creation of temporary file with insecure permissions. The attack requires a local approach. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit is now public and may be used.