CVE-2025-61229: High severity Shirt Pocket SuperDuper! vulnerability
An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61229?
CVE-2025-61229 is considered a high severity vulnerability due to the potential for local attackers to execute arbitrary scripts with root privileges.
How do I fix CVE-2025-61229?
To mitigate CVE-2025-61229, upgrade to SuperDuper! version 3.11 or later.
Who is affected by CVE-2025-61229?
CVE-2025-61229 affects users of Shirt Pocket's SuperDuper! versions 3.10 and earlier.
What kind of attack can be executed due to CVE-2025-61229?
CVE-2025-61229 allows a local attacker to modify the default task template, enabling arbitrary script execution with elevated privileges.
What impact does CVE-2025-61229 have on macOS privacy controls?
CVE-2025-61229 allows attackers to bypass macOS privacy controls by executing scripts with Full Disk Access.