CVE-2025-69604
HIGH 7.8EPSS 0.1%
An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls.
- CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.10% chance of exploitation in the next 30 days, 1th percentile
- Published
- 2026-01-29
- Updated
- 2026-07-05