提出 #634656: mihomo-party-org mihomo-party 1.8.1 Local privilege abuse via unprotected UNIX socket in Mihomo Part情報

タイトルmihomo-party-org mihomo-party 1.8.1 Local privilege abuse via unprotected UNIX socket in Mihomo Part
説明Mihomo Party for macOS before version 1.8.1 exposes a root-owned UNIX socket (`/tmp/mihomo-party-helper.sock`) with world-readable and writable permissions. This socket accepts unauthenticated HTTP requests for setting system-wide proxy configurations. A local attacker can connect to this socket and configure the system to route all traffic through an attacker-controlled server, leading to potential man-in-the-middle (MiTM) attacks and data exfiltration.
ソース⚠️ https://github.com/SwayZGl1tZyyy/zero-days/blob/main/mihomo-party/README.md
ユーザー
 SwayZGl1tZyyy (UID 88771)
送信2025年08月14日 15:23 (8 月 ago)
モデレーション2025年08月25日 17:08 (11 days later)
ステータス承諾済み
VulDBエントリ321343 [Mihomo Party 迄 1.8.1 上 macOS Socket src/main/sys/sysproxy.ts enableSysProxy Local Privilege Escalation]
ポイント20

Do you know our Splunk app?

Download it now for free!