CVE-2026-19755 — NoSleep 1.5.1 - Unauthorized disclosure of root-owned files through privileged XPC helper
NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled command and NSBundlePath values.This issue affects NoSleep…
Published: 2026-08-20 · CVSS: 6.9 · CVSS 4.0
NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled command and NSBundlePath values.This issue affects NoSleep: 1.5.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7