CVE-2025-64724 Arduino IDE for macOS has Insecure File Permissions

🗓️ 18 Dec 2025 15:18:39Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

Before 2.3.7, Arduino IDE macOS had world-writable permissions enabling privilege escalation.

Reporter	Title	Published	Views	Family All 8
CNNVD	Arduino IDE 安全漏洞	18 Dec 202500:00	–	cnnvd
CVE	CVE-2025-64724	18 Dec 202515:18	–	cve
Cvelist	CVE-2025-64724 Arduino IDE for macOS has Insecure File Permissions	18 Dec 202515:18	–	cvelist
EUVD	EUVD-2025-204308	18 Dec 202515:18	–	euvd
NVD	CVE-2025-64724	18 Dec 202516:15	–	nvd
Positive Technologies	PT-2025-52245	18 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-64724	19 Dec 202516:23	–	redhatcve
Vulnrichment	CVE-2025-64724 Arduino IDE for macOS has Insecure File Permissions	18 Dec 202515:18	–	vulnrichment

Source	Link
github	www.github.com/arduino/arduino-ide/pull/2805/commits/5d282f38496e96dcba02818536c0835bd684ec98
github	www.github.com/arduino/arduino-ide/releases/tag/2.3.7
support	www.support.arduino.cc/hc/en-us/articles/24329484618652-ASEC-25-004-Arduino-IDE-v2-3-7-Resolves-Multiple-Vulnerabilities
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64724.json
github	www.github.com/arduino/arduino-ide/security/advisories/GHSA-3fvj-pgqw-fgw6
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-64724

10 Apr 2026 05:33Current

6.8Medium risk

Vulners AI Score6.8

CVSS 44.8

EPSS0.0001

Arduino IDE macOS world writable permissions privilege escalation 2.3.7 release