CVE-2025-57489: High severity Shirt Pocket SuperDuper! vulnerability

Published Dec 1, 2025

Updated

Incorrect access control in the SDAgent component of Shirt Pocket SuperDuper! v3.10 allows attackers to escalate privileges to root due to the improper use of a setuid binary.

Affected Software

2 affected components

Shirt Pocket SuperDuper!

Shirt-pocket Superduper\!=3.10

Event History

Dec 1, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-57489?

The severity of CVE-2025-57489 is considered critical due to the potential for privilege escalation to root.

How do I fix CVE-2025-57489?

To fix CVE-2025-57489, update Shirt Pocket SuperDuper! to the latest version that addresses this access control vulnerability.

What causes CVE-2025-57489?

CVE-2025-57489 is caused by improper access control in the SDAgent component, which allows exploitation via a setuid binary.

Who is affected by CVE-2025-57489?

Users of Shirt Pocket SuperDuper! v3.10 are affected by CVE-2025-57489 due to the vulnerability in the software.

What are the potential consequences of CVE-2025-57489?

The potential consequences of CVE-2025-57489 include unauthorized access and control over the system, leading to possible data breaches.