The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message. This vulnerability poses a significant risk due to its high severity rating.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7 | CVE-2025-6183 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the macOS system and can send a specially crafted JSON message to the StrongDM client. This message can manipulate system configurations, leading to unauthorized changes.
Affected Products
- StrongDM macOS Client: Vulnerable to JSON message manipulation, allowing attackers to alter system configurations.
Mitigation
To mitigate this vulnerability, users should ensure they are using the latest version of the StrongDM macOS client, which includes patches for this issue. Additionally, restricting local access to the system can help prevent exploitation.