Critical · 9.8 CVE-2024-25249 EUVD-2024-22585GHSA-cgpg-xpvx-xqxj

An issue in He3 App for macOS version 2.0.17, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectA…

Published Feb 21, 2024 · Updated Mar 27, 2025 · Assigned by mitre

Description

An issue in He3 App for macOS version 2.0.17, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings.

References

https://github.com/intbjw
https://www.electronjs.org/blog/statement-run-as-node-cves
https://github.com/intbjw/CVE-2024-25249