CVE-2025-43341

macOS Root Privilege Escalation via Permission Flaw

Published Sep 15, 2025 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to gain root privileges.

Analysis

Technical impact

A permissions flaw allows a malicious or improperly designed application to acquire root privileges on affected Apple macOS installations. The vulnerability is rooted in a failure of the operating system to enforce adequate restrictions, as classified under CWE‑862. Attackers who can run or influence a local application may leverage this deficiency to elevate their privileges, potentially compromising system integrity and confidentiality.

Affected Systems

Apple’s macOS is impacted, including the Sonoma and Tahoe operating system families. Vulnerable releases are those prior to macOS Sonoma 14.8 and macOS Tahoe 26; updates to these releases contain a fix that imposes the necessary restrictions.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity potential. The EPSS score of less than 1 % suggests a very low probability of exploitation at the time of this analysis, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is local, wherein an application running with user privileges can trigger the permissions flaw to gain root. No remote exploitation pathway is documented in the available description.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 14.8
`0`	affected	< 26

Configuration 1 [-]

OR	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::

No data.

Vendor	Product	Versions
Apple	Macos	—
Apple	Macos Sonoma	—
Apple	Macos Tahoe	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade the operating system to macOS Sonoma 14.8 or macOS Tahoe 26 to apply the fix
Ensure that all installed applications are signed by trusted developers and are up-to-date; remove or update any unsigned or legacy applications that may exploit the flaw
Enable System Integrity Protection and Gatekeeper to block unsigned or unauthorized applications from running
Monitor system logs for unexpected privilege escalation attempts or anomalous behavior

Generated by OpenCVE AI on April 28, 2026 at 18:41 UTC.

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2025-29315	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to gain root privileges.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.187% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
http://seclists.org/fulldisclosure/2025/Sep/53
http://seclists.org/fulldisclosure/2025/Sep/55
https://support.apple.com/en-us/125110
https://support.apple.com/en-us/125112

History

Apr 28, 2026 7:00 PM Title updated View changes

Type	Values Removed	Values Added
Title		macOS Root Privilege Escalation via Permission Flaw

Apr 2, 2026 8:30 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8. An app may be able to gain root privileges.	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to gain root privileges.
References		https://support.apple.com/en-us/125110

Nov 4, 2025 2:30 AM References updated View changes

Type	Values Removed	Values Added
References	https://support.apple.com/en-us/125110

Nov 4, 2025 1:45 AM Description updated View changes

Type	Values Removed	Values Added
Description	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to gain root privileges.	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8. An app may be able to gain root privileges.

Nov 3, 2025 7:30 PM Added references View changes

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2025/Sep/53 http://seclists.org/fulldisclosure/2025/Sep/55

Sep 17, 2025 2:00 PM Affected versions updated View changes

Type	Values Removed	Values Added
CPEs		cpe:2.3:o:apple:macos::::::::

Sep 17, 2025 11:00 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple Apple macos Apple macos Sonoma Apple macos Tahoe
Vendors & Products		Apple Apple macos Apple macos Sonoma Apple macos Tahoe

Sep 16, 2025 4:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Sep 16, 2025 3:00 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-862
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Sep 15, 2025 10:45 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description		A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to gain root privileges.
References		https://support.apple.com/en-us/125110 https://support.apple.com/en-us/125112