PT-2025-30703

CVE-2025-22165

·

Published

2025-07-24

·

Updated

2025-07-30

Description by

CVSS 3.1
7.3
High
MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Sourcetree for Mac versions 4.2.8 and later
Description This is an arbitrary code execution issue that allows a locally authenticated attacker to execute arbitrary code. The issue has a high impact on confidentiality, integrity, and availability, and requires user interaction.
Recommendations Upgrade to the latest version of Sourcetree for Mac. If upgrading to the latest version is not possible, upgrade to a supported fixed version.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-269: Improper Privilege Management
Related identifiers
CVE-2025-22165
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com