CVE-2025-31275

Sandbox Process Can Arbitrarily Launch Apps on macOS

View on CVE.org
Published Jul 29, 2025 CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Description
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any installed app.

Analysis

AI-generated

Technical impact

A sandboxed process can bypass macOS permissions and launch any installed application, effectively giving an attacker the ability to execute arbitrary code within the context of the launched app. The vulnerability stems from an improper authorization flaw (CWE-274) that allows a process confined by a sandbox to perform operations it should not be able to, leading to potential compromise of system integrity and confidentiality.

Affected Systems

MacOS for all versions before macOS Sequoia 15.6 are affected. The issue is fixed in macOS Sequoia 15.6 and later releases. Users running earlier releases are at risk.

Risk and Exploitability

The CVSS score of 6.2 indicates a medium severity flaw. The EPSS score of less than 1% suggests exploitation is currently rare, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is a sandboxed process, potentially legitimate or malicious, that can be leveraged to launch arbitrary applications. The lack of widely-deployed zero‑day exploits combined with the low EPSS score mitigates urgency, but the impact of being able to run any app warrants prompt attention.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install macOS 15.6 or later to apply the vendor fix.
  • Restrict sandboxed processes by configuring sandbox profiles so that only approved executables can be spawned.
  • Enforce Gatekeeper or MDM rules to require signed applications, preventing non‑trusted binaries from execution.

Generated by OpenCVE AI on April 28, 2026 at 00:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-23099 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any installed app.
History
Type Values Removed Values Added
Title Sandbox Process Can Arbitrarily Launch Apps on macOS
Type Values Removed Values Added
References
Type Values Removed Values Added
First Time appeared Apple
Apple macos
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Type Values Removed Values Added
Weaknesses CWE-274
Metrics cvssV3_1

{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any installed app.
References
Weaknesses
  • CWE-274

    Improper Handling of Insufficient Privileges

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Apr 2, 2026, 6:11 PM
Reserved
Mar 27, 2025, 4:13 PM

View source JSON

Updated
Nov 3, 2025, 7:52 PM

JSON

Status
Modified
Published
Jul 30, 2025, 12:15 AM
Modified
Jun 17, 2026, 9:10 AM

View source JSON

No data.

Updated
Apr 28, 2026, 1:00 AM

JSON