Vendor
Mosh-Pro
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 4.8
TCC Bypass via misconfigured Node fuses in Mosh-Pro
The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Mosh-Pro TCC (Transparency, Consent, and Control) permissions. Acquired resource acces…