CVE-2025-4960
Local Privilege Escalation in Epson InstallNavi Helper via XPC Flaws
Publication date: 2026-02-19
Last updated on: 2026-02-19
Assigner: Pentraze
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| epson | installnavi | *-* |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-863 | The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability exists in the com.epson.InstallNavi.helper tool, which is part of the EPSON printer driver installer. It is a local privilege escalation flaw caused by multiple implementation errors. Specifically, the tool fails to properly authenticate clients communicating over the XPC protocol and does not correctly enforce macOS's authorization model.
Although the tool uses the AuthorizationCopyRights API, it registers overly permissive custom rights in the system's authorization database. These rights can be requested and granted by the authorization daemon to any local user, regardless of their privilege level.
As a result, an attacker with local access can exploit this vulnerability to perform privileged operations such as executing arbitrary commands or installing system components without needing administrative credentials.
How can this vulnerability impact me? :
This vulnerability allows an attacker with local access to escalate their privileges on the affected system. They can execute arbitrary commands or install system components with elevated privileges without requiring administrative credentials.
Such unauthorized privileged access can lead to complete system compromise, unauthorized data access, modification or deletion of system files, and installation of persistent malware or backdoors.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
I don't know