HomeAdvisoriesCactusVPN for MacOS

CactusVPN for MacOS

Root Privilege Escalation Vulnerability | XPC

CVE ID

CVE-2018-7493

Vendor

CactusVPN

Product

CactusVPN

Product Version

< 6.0

Vulnerability Details

CactusVPN for MacOS suffers from a root privilege escalation vulnerability in its privileged helper tool. The privileged helper tool implements an XPC interface, which allows arbitrary applications to execute system commands as root.

Learn more

Vendor Response

Vendor has released an update.

Disclosure Timeline

  • Vendor disclosure

  • Vendor response

  • Vendor submitted update for testing

  • VerSprite validated the vulnerability had been fixed

  • Vendor released update

  • Vendor notified of advisory release