CVE-2025-55076

A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS. The service accepts unauthenticated XPC connections and executes input via system(), which may allow a local user to execute arbitrary commands with root privileges.

CVSS v3 6.2 MEDIUM

6.2^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://almightysec.com/plugin-alliance-helpertool-xpc-service-local-privilege-escalation/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:plugin-alliance:installation_manager:1.4.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

History

26 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Existe una vulnerabilidad local de escalada de privilegios en el servicio InstallationHelper incluido con Plugin Alliance Installation Manager v1.4.0 para macOS. El servicio acepta conexiones XPC no autenticadas y ejecuta la entrada a través de system(), lo que puede permitir a un usuario local ejecutar comandos arbitrarios con privilegios de root.

Information

Published : 2025-12-03 17:15

Updated : 2026-10-26 22:10

NVD link : CVE-2025-55076

Mitre link : CVE-2025-55076

CVE.ORG link : CVE-2025-55076

JSON object : View

Products Affected

plugin-alliance

installation_manager

apple

macos

CWE

CWE-269

Improper Privilege Management

{"id": "CVE-2025-55076", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-55076", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-03T16:34:03.083759Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.5}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-12-03T17:15:52.493", "references": [{"url": "https://almightysec.com/plugin-alliance-helpertool-xpc-service-local-privilege-escalation/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS. The service accepts unauthenticated XPC connections and executes input via system(), which may allow a local user to execute arbitrary commands with root privileges."}, {"lang": "es", "value": "Existe una vulnerabilidad local de escalada de privilegios en el servicio InstallationHelper incluido con Plugin Alliance Installation Manager v1.4.0 para macOS. El servicio acepta conexiones XPC no autenticadas y ejecuta la entrada a trav\u00e9s de system(), lo que puede permitir a un usuario local ejecutar comandos arbitrarios con privilegios de root."}], "lastModified": "2026-10-26T22:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:plugin-alliance:installation_manager:1.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3DE6D4C3-3635-460E-BDDD-763EE18D9844"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}