CVE-2024-7457

Name of the Vulnerable Software and Affected Versions ws.stash.app.mac.daemon.helper (affected versions not specified)

Description The issue is caused by an incorrect use of macOS’s authorization model in the ws.stash.app.mac.daemon.helper tool. Instead of validating the client's authorization reference, the helper invokes AuthorizationCopyRights() using its own privileged context, effectively authorizing itself rather than the client. This allows unprivileged clients to invoke privileged operations via XPC, including unauthorized changes to system-wide network preferences such as SOCKS, HTTP, and HTTPS proxy settings. The absence of proper code-signing checks enables arbitrary processes to exploit this flaw, leading to man-in-the-middle (MITM) attacks through traffic redirection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.