CVE-2025-5199 — LPE on Multipass for macOS
In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker to escalate privileges by modifying files executed with …
Published: 2025-07-11 · CVSS: 7.3 · CVSS 3.1
In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker to escalate privileges by modifying files executed with administrative privileges by a Launch Daemon during system startup.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7