CVE-2018-7493

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-05 · updated 2026-06-17

Description

CactusVPN through 6.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. The privileged helper tool implements an XPC interface, which allows arbitrary applications to execute system commands as root.

Affected products

Cactusvpn: through 6.0

References

https://github.com/VerSprite/research/blob/master/advisories/VS-2018-007.md
https://github.com/VerSprite/research/blob/master/advisories/VS-2018-007.md

Get alerted when CVE-2018-7493 or the next vulnerability affects your stack