Cursor 安全漏洞

Cursor is an AI code editor from Cursor open source. A security vulnerability exists in Cursor version 15.4.1, which stems from a RunAsNode misconfiguration, and could lead to the execution of arbitrary code by a local attacker...

Mosh-Pro 安全漏洞

Mosh-Pro is a software for image and video processing from Mosh-Pro. A security vulnerability exists in Mosh-Pro version 1.3.2, which stems from a misconfiguration of RunAsNode and could lead to the execution of arbitrary code...

Nozbe 安全漏洞

What about Nozbe, a project management software from Nozbe, Inc. A security vulnerability exists in versions prior to Nozbe 2025.11 that stems from a RunAsNode misconfiguration that could lead to the execution of arbitrary code...

CVE-2025-9190: Incorrect Default Permissions

The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Cursor TCC Transparency, Consent, and Control permissions. Acquired resource access is limited to previously granted permission...

CVE-2025-53811: Incorrect Default Permissions

The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Mosh-Pro TCC Transparency, Consent, and Control permissions. Acquired resource access is limited to previously granted...

PT-2025-34756 · Nozbe · Nozbe

Name of the Vulnerable Software and Affected Versions: Nozbe versions prior to 2025.11 Description: The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Nozbe TCC Transparency,...

CVE-2025-51387

The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifically, the following insecure settings were observed: RunAsNode is enabled and EnableNodeCliInspectArguments is not disabled. These configurations allow the application to be...

CVE-2025-51387: Improper Control of Generation of Code

The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifically, the following insecure settings were observed: RunAsNode is enabled and EnableNodeCliInspectArguments is not disabled. These configurations allow the application to be...

CVE-2025-22136: Improper Control of Generation of Code

Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.217 , Tabby enables several high-risk Electron Fuses, including RunAsNode, EnableNodeCliInspectArguments, and EnableNodeOptionsEnvironmentVariable. These fuses create potential code injection vectors even though the...

CVE-2024-23755

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode...

CVE-2024-23755: Improper Control of Generation of Code

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode...

CVE-2024-23755

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode...

PT-2024-20059

Name of the Vulnerable Software and Affected Versions ClickUp Desktop versions prior to 3.3.77 Description The issue allows code injection due to specific Electron Fuses, with inadequate protection against code injection through settings such as RunAsNode. This affects both macOS and Windows...

CVE-2024-23755

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode...

CVE-2024-25249

An issue in He3 App for macOS version 2.0.17, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings...

PT-2024-20844 · He3 App · He3 App

Name of the Vulnerable Software and Affected Versions: He3 App for macOS version 2.0.17 Description: An issue in He3 App for macOS allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. Recommendations: For He3 App for macOS version 2.0.17,...

CVE-2024-25249

An issue in He3 App for macOS version 2.0.17, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings...

CVE-2024-25249: Improper Control of Generation of Code

An issue in He3 App for macOS version 2.0.17, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings...

CVE-2024-25249

An issue in He3 App for macOS version 2.0.17, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings...

He3 Security breaches

He3 is a developer toolkit. A security vulnerability exists in He3 version 2.0.17 that originates from allowing remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings...