CVE-2025-10672

A vulnerability was found in whuan132 AIBattery up to 1.0.9. The affected element is an unknown function of the file AIBatteryHelper/XPC/BatteryXPCService.swift of the component com.collweb.AIBatteryHelper. The manipulation results in missing authentication. The attack requires a local approach. The exploit has been made public and could be used.

• CWE-287
• CWE-306

• https://github.com/SwayZGl1tZyyy/n-days/blob/main/AIBattery-Charge-Limiter/README.md
• https://github.com/SwayZGl1tZyyy/n-days/blob/main/AIBattery-Charge-Limiter/README.md#proof-of-concept
• https://vuldb.com/?ctiid.324793
• https://vuldb.com/?id.324793
• https://vuldb.com/?submit.653159
• https://github.com/SwayZGl1tZyyy/n-days/blob/main/AIBattery-Charge-Limiter/README.md
• https://github.com/SwayZGl1tZyyy/n-days/blob/main/AIBattery-Charge-Limiter/README.md#proof-of-concept

Published

Sep 18, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10667A weakness has been identified in itsourcecode Online Discus…9.8
• CVE-2025-10668A security vulnerability has been detected in itsourcecode O…9.8
• CVE-2025-10669A vulnerability was detected in Airsonic-Advanced up to 10.6…6.3
• CVE-2025-1067There is an untrusted search path vulnerability in Esri ArcG…7.3
• CVE-2025-10670A flaw has been found in itsourcecode E-Logbook with Health …9.8
• CVE-2025-10671A vulnerability has been found in youth-is-as-pale-as-poetry…3.7
• CVE-2025-10673A vulnerability was determined in itsourcecode Student Infor…9.8
• CVE-2025-10674A vulnerability was identified in fuyang_lipengjun platform …4.3
• CVE-2025-10675A security flaw has been discovered in fuyang_lipengjun plat…4.3
• CVE-2025-10676A weakness has been identified in fuyang_lipengjun platform …4.3
• CVE-2025-10678NetBird VPN when installed using vendor's provided script fa…9.3
• CVE-2025-10679The ReviewX – WooCommerce Product Reviews with Multi-Criteri…7.3