Dashboard / CVE-2025-61229

CVE-2025-61229

HIGH 1 PoC
MEDIUM Priority: 0.01 BB Relevance: 51/100
Published: 2025-12-01 Modified: 2026-11-04 First seen: 2026-11-04 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
shirt-pocket superduper\! < 3.10

References & Advisories (2)

Proof of Concept (1)

—
https://github.com/graypixel2121/CVE-2025-61229
nomi-sec

Bug Bounty Relevance

51 / 100
✓ Low complexity
✓ No user interaction
✓ PoC available (1)

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.14%
Raw Score 0.001440
Percentile 3.7%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00144
2026-11-13
0.00144
2026-11-12
0.00144
2026-11-10
0.00144
2026-11-09
0.00144
2026-11-08
0.00144
2026-11-07
0.00144
2026-11-06
0.00144
2026-11-05
0.00144
2026-11-04
0.00144

Intelligence Sources

nvd ref →

External Links