CVE-2025-69604
An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts wit…
Published: 2026-01-29 · CVSS: 7.8 · CVSS 3.1
An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7