CVE-2025-4412 TCC Bypass via Dylib Loading in Viscosity.app
Attackers can bypass macOS TCC restrictions by loading a malicious dylib into Viscosity, gaining unauthorized access to user-granted file resources.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-4412?
CVE-2025-4412 is a medium-severity vulnerability in SparkLabs Viscosity, published on 27 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
On macOS systems, by utilizing a Launch Agent and loading the viscosity_openvpn process from the application bundle, it is possible to load a dynamic library with Viscosity's TCC (Transparency, Consent, and Control) identity. The acquired resource access is limited without entitlements such as access to the camera or microphone. Only user-granted permissions for file resources apply. Access to other resources beyond granted-permissions requires user interaction with a system prompt asking for permission.
This issue was fixed in version 1.11.5 of Viscosity.
Weakness: CWE-276
Which versions are affected by CVE-2025-4412?
How do I fix CVE-2025-4412?
No fix has been published for CVE-2025-4412 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-4412 being exploited?
There is no known exploitation of CVE-2025-4412 in the wild and no public exploit code.
Sources
Also known as GHSA-496p-vfhp-58hp.