CVE-2025-14714 TCC Bypass via Inherited Permissions in Bundled Interpreter
Attackers can bypass macOS TCC restrictions by executing a bundled Python interpreter, gaining unauthorized access to protected resources.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-14714?
CVE-2025-14714 is a low-severity authentication bypass vulnerability in Libreoffice Libreoffice, published on 15 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle
By executing the bundled interpreter directly the attacker's scripts run with the application's TCC privileges
In fixed versions parent-constraints are used to allow only the main application to launch interpreter with those permissions
This issue affects LibreOffice on macOS: from 25.2 before < 25.2.4.
Weakness: CWE-288
Which versions are affected by CVE-2025-14714?
It affects 1 product.
Products include Libreoffice Libreoffice.
How do I fix CVE-2025-14714?
No fix has been published for CVE-2025-14714 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-14714 being exploited?
There is no known exploitation of CVE-2025-14714 in the wild and no public exploit code.
Other vulnerabilities in Libreoffice Libreoffice
Sources
Also known as GHSA-65c5-j3wr-v7fh.