CVE-2025-10751 - MacForge 1.2.0 Beta 1 - Local Privilege Escalation

Back Back to CVE browser

HIGH

MacForge 1.2.0 Beta 1 - Local Privilege Escalation

Published Oct 4, 2025

8.5

HIGH

CVSS 4.0

EPSS 0.20%

Description

MacForge contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.This issue affects MacForge: 1.2.0 Beta 1.

Affected products

Vendor MacEnhance Product MacForge Default
unaffected
- Version
  1.2.0 Beta 1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

MacEnhance

MacForge

unaffected

Version	Status	Constraints
1.2.0 Beta 1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (3)

https://fluidattacks.com/advisories/m83
exploitthird-party-advisoryThird Party Advisory
https://github.com/MacEnhance/MacForge
productThird Party Advisory
https://www.macenhance.com/macforge
product

Link	Providers	Tags
https://fluidattacks.com/advisories/m83		exploitthird-party-advisoryThird Party Advisory
https://github.com/MacEnhance/MacForge		productThird Party Advisory
https://www.macenhance.com/macforge		product