high7.8
CVE-2025-61229
An issue in Shirt Pocket's SuperDuper!
Impact
An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shirt-Pocket | Superduper\! | through 3.10 |