Code Injection Vulnerability in Wulkano KAP for MacOS
CVE-2025-7961

6.9MEDIUM

Key Information:

Vendor

Wulkano

Status
Kap
Vendor
CVE Published:
15 August 2025

What is CVE-2025-7961?

A code injection vulnerability in Wulkano KAP for MacOS permits a TCC bypass, allowing unauthorized manipulation of application behavior. Specifically, this issue can lead to the unintended execution of arbitrary code, potentially compromising user security and privacy. Users of KAP version 3.6.0 should be aware of this vulnerability and consider applying patches or updates provided by the vendor to mitigate risks.

Affected Version(s)

KAP MacOS 3.6.0

References

https://fluidattacks.com/advisories/cafrune
third-party-advisory
https://github.com/wulkano/Kap
product
http://wulkano.com/
related

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-7961 : Code Injection Vulnerability in Wulkano KAP for MacOS