CVE-2025-5199 Information

Jul 13, 2025 cve

Description

In Canonical Multipass up to and including version 1.15.1 on macOS incorrect default permissions allow a local attacker to escalate privileges by modifying files executed with administrative privileges by a Launch Daemon during system startup.

Reference

https://github.com/canonical/multipass/pull/4115 https://github.com/canonical/multipass/security/advisories/GHSA-2j82-p5cq-62p3

CNNVD-202507-1698 (Published: 2025-07-12)

Share on: