CVE-2025-9474
A vulnerability was detected in Mihomo Party up to 1.8.1 on macOS. Affected is the function enableSysProxy of the file src/main/sys/sysproxy.ts of the component Socket Handler. The manipulation results in creation of temporary file with insecure permissions. The attack requires a local approach. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit is now public and may be used.
Scoring
- Severity
- LOW
- CVSS base score
- 4.5
- CVSS vector
- CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
- EPSS probability
- 0.14%
- CWE
- CWE-378, CWE-377
- Published
- 2025-08-26
- Last modified
- 2026-03-12
Affected products
- Mihomo Party
- Mihomo Party
Weakness type
Related vulnerabilities
- CVE-2026-46388 — osquery: Unprivileged users can temporarily read file carve contents
- CVE-2026-4137 — Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow
- CVE-2026-33572 — OpenClaw < 2026.2.17 - Insufficient File Permissions in Session Transcript Files
- CVE-2026-4822 — Enter Software Iperius Backup Backup Service temp file
- CVE-2026-2817 — Spring Data Geode Insecure Temporary Directory Usage
- CVE-2025-46685 — Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File...
- CVE-2025-46684 — Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File...
- CVE-2025-34352 — JumpCloud Remote Assist < 0.317.0 Arbitrary File Write/Delete via Insecure Temp Directory