CVE-2025-62686

A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS. Due to the absence of a hardened runtime and a __RESTRICT segment, a local user may exploit the DYLD_INSERT_LIBRARIES environment variable to inject a dynamic library, potentially resulting in code execution with elevated privileges.

CVSS v3 6.2 MEDIUM

6.2^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://almightysec.com/plugin-alliance-installationhelper-dylib-injection/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:plugin-alliance:installation_manager:1.4.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

History

27 Oct 2026, 12:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de escalada de privilegios local existe en el servicio Plugin Alliance InstallationHelper incluido con Plugin Alliance Installation Manager v1.4.0 en macOS. Debido a la ausencia de un runtime endurecido y un segmento __RESTRICT, un usuario local puede explotar la variable de entorno DYLD_INSERT_LIBRARIES para inyectar una biblioteca dinámica, lo que podría resultar en la ejecución de código con privilegios elevados.

Information

Published : 2025-12-03 17:15

Updated : 2026-10-27 12:10

NVD link : CVE-2025-62686

Mitre link : CVE-2025-62686

CVE.ORG link : CVE-2025-62686

JSON object : View

Products Affected

plugin-alliance

installation_manager

apple

macos

CWE

CWE-269

Improper Privilege Management

{"id": "CVE-2025-62686", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-62686", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-03T16:33:05.210886Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.5}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-12-03T17:15:52.993", "references": [{"url": "https://almightysec.com/plugin-alliance-installationhelper-dylib-injection/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS. Due to the absence of a hardened runtime and a __RESTRICT segment, a local user may exploit the DYLD_INSERT_LIBRARIES environment variable to inject a dynamic library, potentially resulting in code execution with elevated privileges."}, {"lang": "es", "value": "Una vulnerabilidad de escalada de privilegios local existe en el servicio Plugin Alliance InstallationHelper incluido con Plugin Alliance Installation Manager v1.4.0 en macOS. Debido a la ausencia de un runtime endurecido y un segmento __RESTRICT, un usuario local puede explotar la variable de entorno DYLD_INSERT_LIBRARIES para inyectar una biblioteca din\u00e1mica, lo que podr\u00eda resultar en la ejecuci\u00f3n de c\u00f3digo con privilegios elevados."}], "lastModified": "2026-10-27T12:10:00.343", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:plugin-alliance:installation_manager:1.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3DE6D4C3-3635-460E-BDDD-763EE18D9844"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}