CVE-2026-87690

Name of the Vulnerable Software and Affected Versions Metasploit Framework (affected versions not specified)

Description The post module post/apple ios/gather/ios image gather contains a relative path traversal issue. The module takes file names from a Meterpreter directory listing, which can be controlled by a compromised iOS device, and passes them without sanitization to the client.fs.file.download file() function. This allows a malicious device to escape the intended storage directory and overwrite sensitive files on the operator's workstation, such as the msfconsole.rc resource file. Since msfconsole.rc is executed automatically at startup, an attacker can achieve persistent code execution and obtain an interactive shell with the privileges of the operator, often root, by loading a malicious Ruby plugin.

Recommendations As a temporary workaround, avoid using the post/apple ios/gather/ios image gather module when interacting with untrusted or potentially tampered iOS devices. At the moment, there is no information about a newer version that contains a fix for this vulnerability.