Vulnerability Spotlight: Privilege escalation bug in Clean MyMac X's helper service
Summary: Tyler Bohan of Cisco Talos discovered a privilege escalation vulnerability in CleanMyMac X's helper service, tracked as TALOS-2018-0759/CVE-2019-5011, caused by the application failing to remove vulnerable components when upgrading to the latest version. Talos confirmed version 4.20 is affected, and a user with local access can exploit it to modify the file system as root.
What you should know: The flaw survives the upgrade meant to fix it, so a Mac running the patched version can still carry the vulnerable helper service - and anyone with local access can use it to write to the file system as root.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-5011
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026