Executive Summary

This vulnerability exists in the Aquarius HelperTool (1.0.003) privileged XPC service on macOS. The service accepts connections from any local process without verifying the client's identity, and its authorization logic is flawed because it calls AuthorizationCopyRights with a NULL reference, causing all authorization checks to succeed. This allows a local attacker to execute arbitrary commands as root by injecting attacker-controlled input into NSTask, potentially leading to privilege escalation.

Useful 0 Not Useful 0

Impact Analysis

An attacker with local access can exploit this vulnerability to run arbitrary commands with root privileges, create persistent backdoors, or obtain a fully interactive root shell. This can lead to complete system compromise, unauthorized access to sensitive data, and loss of control over the affected system.

Useful 0 Not Useful 0