CVE-2025-8672
Last modified
CVE-2025-8672 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application's previously granted TCC permissions to access user's files in privacy-protected folders without triggering user prompts. EPSS estimates a 0.30% chance of exploitation in the next 30 days.
Description
MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application's previously granted TCC permissions to access user's files in privacy-protected folders without triggering user prompts. Accessing other resources beyond previously granted TCC permissions will prompt the user for approval in the name of GIMP, potentially disguising attacker's malicious intent. This issue has been fixed in 3.1.4.2 version of GIMP.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gimp | Gimp | >= 3.0.2 |
References
- https://cert.pl/en/posts/2025/08/tcc-bypass/Third Party Advisory
- https://gitlab.gnome.org/GNOME/gimp/-/issues/13848Issue Tracking
- https://www.jamf.com/blog/zero-day-tcc-bypass-discovered-in-xcsset-malware/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-8672?
How severe is CVE-2025-8672?
How do I fix CVE-2025-8672?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-8665A vulnerability, which was classified as critical, has been …6.3
- CVE-2025-8666The Testimonial Carousel For Elementor plugin for WordPress …6.4
- CVE-2025-8667A vulnerability, which was classified as critical, was found…6.3
- CVE-2025-8668Improper Neutralization of Input During Web Page Generation …9.4
- CVE-2025-8669The Customify theme for WordPress is vulnerable to Cross-Sit…4.3
- CVE-2025-8671A mismatch caused by client-triggered server-sent stream res…7.5
- CVE-2025-8675Server-Side Request Forgery (SSRF) vulnerability in Drupal A…8.8
- CVE-2025-8676The B Slider- Gutenberg Slider Block for WP plugin for WordP…4.3
- CVE-2025-8677Querying for records within a specially crafted zone contain…7.5
- CVE-2025-8678The WP Crontrol plugin for WordPress is vulnerable to blind …5.9
- CVE-2025-8679In ExtremeGuest Essentials before 25.5.0, captive-portal may…9.8
- CVE-2025-8680The B Slider- Gutenberg Slider Block for WP plugin for WordP…4.3
Are you affected by CVE-2025-8672?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST