Vulnerability Spotlight: Multiple privilege escalation vulnerabilities in Clean MyMac X
Summary: Cisco Talos disclosed multiple privilege escalation vulnerabilities in MacPaw's CleanMyMac X, all stemming from improper input validation in the helper protocol's functions, including moveItemAtPath, moveToTrashItemAtPath, removeItemAtPath, truncateFileAtPath, removeKextAtPath, removeDiagnosticsLogs, enableLaunchdAgentAtPath, removeLaunchdAgentAtPath, removeASL, removePackageWithID, securelyRemoveItemAtPath, disableLaunchdAgentAtPath, and a denial-of-service bug in pleaseTerminate. Talos confirmed version 4.04 is affected by all of these, and MacPaw has released version 4.2.0 to resolve them.
What's compelling: Any application on an affected Mac could call these helper functions and run them as root without validation, letting a non-root user delete files from the root file system or terminate root daemons - so a cleanup utility installed with elevated privileges becomes the path across the privilege boundary.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026