CVE-2025-24115

Sandbox Path Traversal Allowing Unauthorized File Access

Published Jan 27, 2025 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Description

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to read files outside of its sandbox.

Analysis

Technical impact

A path handling flaw allows a sandboxed application to read files outside its protected area. The vulnerability results in unintended disclosure of data that the application should not have access to, potentially exposing sensitive system or user files. It is identified as CWE‑125, an out‑of‑bounds read weakness.

Affected Systems

Apple macOS is affected. The flaw exists in all releases of macOS Sequoia earlier than 15.3, Sonoma earlier than 14.7.3, and Ventura earlier than 13.7.3. Updating to any of these or later patched releases removes the vulnerability.

Risk and Exploitability

The CVSS score of 5.5 indicates a moderate severity, and the EPSS score of less than 1% implies a very low likelihood of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. Attackers would need local execution of a malicious app or to manipulate an existing sandboxed app to gain the ability to read arbitrary files; remote exploitation is unlikely based on the provided information.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 13.7.3
`0`	affected	< 14.7.3
`0`	affected	< 15.3

Configuration 1 [-]

OR	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Install macOS Sequoia starting at version 15.3 or later, or Sonoma 14.7.3 or later, or Ventura 13.7.3 or later. The OS update applies the path‑validation fix that prevents the file‑reading attack.
Restart the system after applying the OS update to ensure all subsystems recognize the patch.
Limit the installation of sandboxed applications to trusted sources and monitor for unknown or malicious apps that could attempt to read restricted files.

Generated by OpenCVE AI on April 28, 2026 at 19:10 UTC.

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2025-3627	A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to read files outside of its sandbox.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.264% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
http://seclists.org/fulldisclosure/2025/Jan/15
http://seclists.org/fulldisclosure/2025/Jan/16
http://seclists.org/fulldisclosure/2025/Jan/17
https://support.apple.com/en-us/122068
https://support.apple.com/en-us/122069
https://support.apple.com/en-us/122070

History

Apr 28, 2026 7:30 PM Title updated View changes

Type	Values Removed	Values Added
Title		Sandbox Path Traversal Allowing Unauthorized File Access

Apr 2, 2026 8:30 PM Description updated View changes

Type	Values Removed	Values Added
Description	A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to read files outside of its sandbox.	A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to read files outside of its sandbox.

Nov 3, 2025 9:30 PM Added references View changes

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2025/Jan/15 http://seclists.org/fulldisclosure/2025/Jan/16 http://seclists.org/fulldisclosure/2025/Jan/17

Mar 18, 2025 7:45 PM First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple Apple macos
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:o:apple:macos::::::::
Vendors & Products		Apple Apple macos

Mar 18, 2025 7:15 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-125
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}`

Feb 18, 2025 8:45 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses	CWE-125
Metrics	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}`

Jan 28, 2025 4:15 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-125
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Jan 27, 2025 10:00 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description		A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to read files outside of its sandbox.
References		https://support.apple.com/en-us/122068 https://support.apple.com/en-us/122069 https://support.apple.com/en-us/122070