CVE-2025-1398: macOS TCC Bypass via Code Injection
Mattermost Desktop App versions <=5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control (TCC) via code injection.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1398?
The severity of CVE-2025-1398 is high due to its potential for remote code execution through the exploitation of unnecessary macOS entitlements.
How do I fix CVE-2025-1398?
To fix CVE-2025-1398, upgrade the Mattermost Desktop App to version 5.10.1 or later, which removes the unnecessary entitlements.
What does CVE-2025-1398 affect?
CVE-2025-1398 affects the Mattermost Desktop App versions 5.10.0 and earlier on macOS.
Can CVE-2025-1398 be exploited remotely?
Yes, CVE-2025-1398 can be exploited remotely by an attacker with access to the affected system.
What is the impact of CVE-2025-1398 on user privacy?
The impact of CVE-2025-1398 on user privacy is significant as it allows attackers to bypass macOS Transparency, Consent, and Control (TCC) mechanisms.