Privilege Escalation in Canonical Multipass on macOS
CVE-2025-5199

Currently unrated

Key Information:

Vendor

Canonical

Status
Multipass
Vendor
CVE Published:
12 July 2025

What is CVE-2025-5199?

In Canonical Multipass, up to version 1.15.1 on macOS, a vulnerability exists due to incorrect default permissions. This allows local attackers to escalate their privileges by modifying files that are executed with administrative rights by a Launch Daemon during system initialization. The flaw can be exploited to gain unauthorized access to sensitive system resources, posing significant security risks.

References

https://github.com/canonical/multipass/pull/4115
https://github.com/canonical/multipass/security/advisorie...

Timeline

  • Vulnerability published

.
CVE-2025-5199 : Privilege Escalation in Canonical Multipass on macOS