An improper control of code generation (‘Code Injection’) vulnerability in Wulkano KAP on MacOS allows TCC Bypass. This issue affects KAP version 3.6.0. The vulnerability can lead to unauthorized access and manipulation of the application.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.9 | CVE-2025-7961 |
Exploitation
To exploit this vulnerability, an attacker with local access can leverage the improper control of code generation to bypass TCC (Transparency, Consent, and Control) protections, potentially allowing unauthorized actions within the application.
Affected Products
- KAP 3.6.0: The affected version of Wulkano KAP on MacOS is vulnerable to code injection attacks, which can compromise the application’s integrity and confidentiality.
Mitigation
To mitigate this vulnerability, users should update to the latest version of Wulkano KAP that addresses this issue. Additionally, implementing strict access controls and monitoring for unauthorized code execution can help reduce the risk.