CVE-2025-70341

Impact

Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/App-Auto-Patch/App-Auto-Patch/blob/main/App-Auto-Patch-via-Dialog.zsh
• https://github.com/App-Auto-Patch/App-Auto-Patch/issues/203
• https://github.com/App-Auto-Patch/App-Auto-Patch/pull/202
• https://github.com/malvector/CVE-2025-70341