CVE-2025-70341

Summary

Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/App-Auto-Patch/App-Auto-Patch/pull/202
• https://github.com/App-Auto-Patch/App-Auto-Patch/issues/203
• https://github.com/App-Auto-Patch/App-Auto-Patch/blob/main/App-Auto-Patch-via-Dialog.zsh
• https://github.com/malvector/CVE-2025-70341

• ←Previous
• Next→