CVE-2025-54595

Pearcleaner is a free, source-available and fair-code licensed mac app cleaner. The PearcleanerHelper is a privileged helper tool bundled with the Pearcleaner application. It is registered and activated only after the user approves a system prompt to allow privileged operations. Upon approval, the helper is configured as a LaunchDaemon and runs with root privileges. In versions 4.4.0 through 4.5.1, the helper registers an XPC service (com.alienator88.Pearcleaner.PearcleanerHelper) and accepts unauthenticated connections from any local process. It exposes a method that executes arbitrary shell commands. This allows any local unprivileged user to escalate privileges to root once the helper is approved and active. This issue is fixed in version 4.5.2.

• CWE-78
• CWE-269

• https://github.com/alienator88/Pearcleaner/commit/69afadfa95791cb998118ca35c227007b230b984
• https://github.com/alienator88/Pearcleaner/issues/278
• https://github.com/alienator88/Pearcleaner/releases/tag/4.5.2
• https://github.com/alienator88/Pearcleaner/security/advisories/GHSA-gr2j-65fh-8pvc

Published

Aug 1, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-5459A user with specific node group editing permissions and a sp…8.8
• CVE-2025-54590webfinger.js is a TypeScript-based WebFinger client that run…6.9
• CVE-2025-54591FreshRSS is a free, self-hostable RSS aggregator. Versions 1…7.5
• CVE-2025-54592FreshRSS is a free, self-hostable RSS aggregator. Versions 1…9.8
• CVE-2025-54593FreshRSS is a free, self-hostable RSS aggregator. In version…7.2
• CVE-2025-54594react-native-bottom-tabs is a library of Native Bottom Tabs …9.1
• CVE-2025-54596Abnormal Security /v1.0/rbac/users_v2/{USER_ID}/ before 2025…4.3
• CVE-2025-54597LinuxServer.io Heimdall before 2.7.3 allows XSS via the q pa…6.1
• CVE-2025-54598The Bevy Event service through 2025-07-22, as used for eBay …6.5
• CVE-2025-54599The Bevy Event service through 2025-07-22, as used for eBay …7.5
• CVE-2025-54601An issue was discovered in the Wi-Fi driver in Samsung Mobil…7
• CVE-2025-54602An issue was discovered in the Wi-Fi driver in Samsung Mobil…7