CVE-2026-4556: macOS Exam4 Local Privilege Escalation via Command Injection
Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The [ConsoleLogHelper copyConsoleIntoFileFromStartDate:] method executes a syslog command using attacker-controlled parameters without proper sanitization, enabling command injection. Successful exploitation allows a local attacker to execute arbitrary commands with root privileges through LaunchSynchronous.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A local attacker with low privileges on a macOS system where Extegrity Exam4 is installed can exploit the vulnerable privileged helper. No user interaction is required.
What level of access does successful exploitation provide?
Successful command injection through the com.extegrity.LogTool helper allows arbitrary commands to run with root privileges.
Which component should defenders investigate?
Investigate the com.extegrity.LogTool privileged helper and its XPC-exposed ConsoleLogHelper copyConsoleIntoFileFromStartDate: method. The vulnerable path passes attacker-controlled parameters to a syslog command.