CVE-2025-65843

Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its support data archive generation feature. The application follows symbolic links placed inside the ~/Library/Logs/Aquarius directory and treats them as regular files. When building the support ZIP, Aquarius recursively enumerates logs using a JUCE directory iterator configured to follow symlinks, and later writes file data without validating whether the target is a symbolic link. A local attacker can exploit this behavior by planting symlinks to arbitrary filesystem locations, resulting in unauthorized disclosure or modification of arbitrary files. When chained with the associated HelperTool privilege escalation issue, root-owned files may also be exposed.

• CWE-59

• https://almightysec.com/insecure-file-handling-via-symlink/Exploit, Third Party Advisory

Published

Dec 3, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-65836PublicCMS V5.202506.b is vulnerable to SSRF. in the chat int…9.1
• CVE-2025-65837PublicCMS V5.202506.b is vulnerable to Cross Site Scripting …5.4
• CVE-2025-65838PublicCMS V5.202506.b is vulnerable to path traversal via th…7.5
• CVE-2025-65840PublicCMS V5.202506.b is vulnerable to Cross Site Request Fo…8.8
• CVE-2025-65841Aquarius Desktop 3.0.069 for macOS stores user authenticatio…6.2
• CVE-2025-65842The Aquarius HelperTool (1.0.003) privileged XPC service on …5.1
• CVE-2025-65844EverShop 2.0.1 allows a remote unauthenticated attacker to u…7.5
• CVE-2025-65849A cryptanalytic break in Altcha Proof-of-Work obfuscation mo…9.1
• CVE-2025-6585The WP JobHunt plugin for WordPress is vulnerable to Insecur…8.1
• CVE-2025-65854Insecure permissions in the scheduled tasks feature of MineA…9.8
• CVE-2025-65855The OTA firmware update mechanism in Netun Solutions HelpFla…6.6
• CVE-2025-65856Authentication bypass vulnerability in Xiongmai XM530 IP cam…9.8