Skip to content
OpenAdvisories

Vendor

Mosh-Pro

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.8

    TCC Bypass via misconfigured Node fuses in Mosh-Pro

    The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Mosh-Pro TCC (Transparency, Consent, and Control) permissions.  Acquired resource acces…