CVE-2025-4280

MacOS version of Poedit bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the...

PT-2025-22454 · Poedit · Poedit

Name of the Vulnerable Software and Affected Versions: Poedit versions prior to 3.6.3 Description: The MacOS version of Poedit bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with loc...

Poedit 安全漏洞

Poedit is a translation editor for Mac, Windows and Unix by the individual developer Václav Slavík. A security vulnerability exists in Poedit versions 2.0 through prior to 3.6.3 that stems from the bundled Python interpreter inheriting TCC permissions, which could lead to local users accessing...