CVE-2018-4047

CVE-2018-4047 affects CleanMyMac X 4.04. The vulnerability lies in the helper service, specifically the disableLaunchdAgentAtPath function, where user-controlled input is passed to launchtl without validation. This allows a local attacker to run root-level operations and uninstall launchd scripts...