CVE-2025-70341

CVE-2025-70341：App-Auto-Patch 中的不安全权限与任意代码执行 摘要 App-Auto-Patch v3.4.2 使用世界可写权限（chmod 777）创建其工作目录，从而引发本地 TOCTOU（时间检查-时间使用）竞争条件。未授权的本地攻击者可利用此漏洞在安装前将经过验证的软件包替换为恶意软件包，从而以 root 身份执行任意代码。此外，恶意的 Installomator 标签片段可在标签解析期间通过eval对未净化的输入执行任意代码。 受影响版本 受影响版本： App-Auto-Patch = 3.4.2 修复版本： App-Auto-Patch 3.5.0...

CVE-2025-70341

Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files...

EUVD-2025-208271

Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files...

CVE-2025-70341

Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files...

App Auto-Patch 安全漏洞

App Auto-Patch is an open-source tool developed by App Auto-Patch for automating the patching of Mac applications. Version 3.4.2 of App Auto-Patch contains a security vulnerability, which stems from insecure permissions, potentially allowing attackers to write arbitrary files...

CVE-2025-70341

Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files...

CVE-2025-70341

Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files...

CVE-2025-70341

Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files...

PT-2026-22926

Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files...

CVE-2025-70341

The CVE concerns App-Auto-Patch v3.4.2 with insecure permissions that create a race condition allowing an attacker to write arbitrary files. The description provides the affected product and version and the underlying issue (permission race). No exploitation details or remediation are given in th...

CVE-2025-70341

Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files...