CVE-2024-23741 - An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings

Back Back to CVE browser

CRITICAL

An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings

Published Jan 28, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 1.57%

Description

An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings.

Affected products

Vendor Hyper Product Hyper Default
unknown
Affected
- ≥ 0, ≤ 3.4.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Hyper	Hyper	unknown	Affected ≥ 0, ≤ 3.4.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-21197
Advisory
https://github.com/V3x0r/CVE-2024-23741
Third Party Advisory
https://www.electronjs.org/blog/statement-run-as-node-cves
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-21197		Advisory
https://github.com/V3x0r/CVE-2024-23741		Third Party Advisory
https://www.electronjs.org/blog/statement-run-as-node-cves		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 28, 2024

Updated Jun 3, 2025

Reserved Jan 21, 2024

Link CVE-2024-23741

CISA Vulnrichment

Updated Aug 23, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-23741

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jan 28, 2024

Updated Jun 3, 2025

Link EUVD-2024-21197

GitHub

No data