CVE-2025-25364

A command injection vulnerability exists in the me.connectify.SMJobBlessHelper XPC service of Speedify VPN versions up to 15.0.0 . The root cause is improper input validation within the XPC interface of the helper tool, specifically affecting the cmdPath and cmdBin fields. Successful exploitation...