In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker to escalate privileges by modifying files executed with administrative privileges by a Launch Daemon during system startup.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.3 | CVE-2025-5199 |
Exploitation
To exploit this vulnerability, an attacker with local access can modify files that are executed with administrative privileges during system startup. This requires the attacker to have the ability to interact with the system and potentially gain elevated privileges.
Affected Products
- Canonical Multipass: A tool for managing virtual machines, which is affected due to incorrect default permissions allowing privilege escalation.
Mitigation
To mitigate this vulnerability, it is recommended to update Canonical Multipass to the latest version where the permissions issue has been addressed. Additionally, reviewing and adjusting file permissions for Launch Daemons can help prevent unauthorized privilege escalation.