2026-01-29 00:00:00
mitre
PUBLISHED
An issue in Shirt Pockets SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls.