CVE-2025-31267

An authentication issue was addressed with improved state management. This issue is fixed in App Store Connect 3.0. An attacker with physical access to an unlocked device may be able to view sensitive user information.

• CWE-287

• https://support.apple.com/en-us/123356Vendor Advisory

Published

Jul 10, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-31260A permissions issue was addressed with additional restrictio…5.5
• CVE-2025-31261A permissions issue was addressed with additional sandbox re…5.5
• CVE-2025-31262A permissions issue was addressed with additional restrictio…5.5
• CVE-2025-31263The issue was addressed with improved memory handling. This …9.1
• CVE-2025-31264An authentication issue was addressed with improved state ma…4.6
• CVE-2025-31266A spoofing issue was addressed with improved truncation when…4.3
• CVE-2025-31268A permissions issue was addressed with additional restrictio…5.5
• CVE-2025-31269A permissions issue was addressed with additional restrictio…5.5
• CVE-2025-31270A permissions issue was addressed with additional restrictio…5.5
• CVE-2025-31271This issue was addressed through improved state management. …7.5
• CVE-2025-31272The issue was addressed with improved checks. This issue is …7.8
• CVE-2025-31273The issue was addressed with improved memory handling. This …8.8