The Mac OS version of gematik Authenticator, spanning versions 4.12.0 through 4.15.x, is susceptible to remote code execution when a user opens a malicious file. This flaw permits an attacker to run arbitrary code on the victim’s machine, potentially compromising all data and operations on that device.

The affected product is gematik Authenticator for macOS. Versions 4.12.0, 4.13.0, 4.14.0, and 4.15.x are vulnerable, while version 4.16.0 and newer contain the required fix.

The CVSS score of 7.8 indicates high severity, while the EPSS score of less than 1% suggests a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the exploit is triggered when a user opens a malicious file, indicating a social engineering vector such as email attachments or downloaded files. There are no known workarounds.