xspawn macOS launchd Parent Spoofing Client

xspawn is a macOS process execution utility that submits programs directly to launchd through its private XPC bootstrap interface. Rather than executing the requested program itself, xspawn causes launchd to spawn the process through xpcproxy, resulting in Endpoint Security and EDR telemetry...

PT-2026-83738

Name of the Vulnerable Software and Affected Versions @hulumi/policies versions prior to 1.3.2 Description An issue exists where attackers can submit spoofed SecureBucket parent evidence during policy evaluation. By providing falsified evidence, attackers can bypass security policy checks, which...