Uncontrolled Search Path Element Vulnerability in Yandex Telemost for MacOS

CVE-2025-5471

What is CVE-2025-5471?

An uncontrolled search path element vulnerability exists in Yandex Telemost for MacOS, allowing for potential search order hijacking. This vulnerability affects versions prior to 2.19.1. Attackers can exploit this flaw to run untrusted code disguised as legitimate applications, leading to unauthorized access and potentially severe security implications.

References