CVE-2025-31198

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A path handling issue was addressed with improved validation.

• CWE-59

• https://support.apple.com/en-us/122373Release Notes, Vendor Advisory
• https://support.apple.com/en-us/122374Release Notes, Vendor Advisory
• https://support.apple.com/en-us/122375Release Notes, Vendor Advisory

Published

May 29, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-31191This issue was addressed through improved state management. …5.5
• CVE-2025-31192The issue was addressed with improved checks. This issue is …6.7
• CVE-2025-31194An authentication issue was addressed with improved state ma…9.8
• CVE-2025-31195The issue was addressed by adding additional logic. This iss…6.3
• CVE-2025-31196An out-of-bounds read was addressed with improved input vali…5.5
• CVE-2025-31197The issue was addressed with improved checks. This issue is …5.7
• CVE-2025-31199A logging issue was addressed with improved data redaction. …5.5
• CVE-2025-3120A vulnerability was found in SourceCodester Apartment Visito…9.8
• CVE-2025-31200A memory corruption issue was addressed with improved bounds…9.8
• CVE-2025-31201This issue was addressed by removing the vulnerable code. Th…9.8
• CVE-2025-31202A null pointer dereference was addressed with improved input…5.5
• CVE-2025-31203An integer overflow was addressed with improved input valida…6.5