CVE-2025-61229
An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges …
Published: 2025-12-01 · CVSS: 8.4 · CVSS 3.1
An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7