| शीर्षक | mihomo-party-org mihomo-party 1.8.1 Local privilege abuse via unprotected UNIX socket in Mihomo Part |
|---|
| विवरण | Mihomo Party for macOS before version 1.8.1 exposes a root-owned UNIX socket (`/tmp/mihomo-party-helper.sock`) with world-readable and writable permissions. This socket accepts unauthenticated HTTP requests for setting system-wide proxy configurations. A local attacker can connect to this socket and configure the system to route all traffic through an attacker-controlled server, leading to potential man-in-the-middle (MiTM) attacks and data exfiltration.
|
|---|
| स्रोत | ⚠️ https://github.com/SwayZGl1tZyyy/zero-days/blob/main/mihomo-party/README.md |
|---|
| उपयोगकर्ता | SwayZGl1tZyyy (UID 88771) |
|---|
| सबमिशन | 14/08/2025 03:23 PM (1 वर्ष पहले) |
|---|
| संयम | 25/08/2025 05:08 PM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 321343 [Mihomo Party तक 1.8.1 पर macOS Socket src/main/sys/sysproxy.ts enableSysProxy Local Privilege Escalation] |
|---|
| अंक | 20 |
|---|