What’s Vulnerable › Vulnerabilities

CVE-2020-15349

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-11-17 · updated 2026-06-17
• Weakness: CWE-862

Description

BinaryNights ForkLift 3.x before 3.4 has a local privilege escalation vulnerability because the privileged helper tool implements an XPC interface that allows file operations to any process (copy, move, delete) as root and changing permissions.

Affected products

• Binarynights Forklift: from 3.0 before 3.4 — fixed in 3.4

How to fix

Upgrade to a fixed version: Binarynights Forklift 3.4. Check the vendor advisory for mitigations.

References

• https://binarynights.com/blog/posts/forklift-3-4-security-update.html
• https://insinuator.net/2020/11/forklift-lpe/
• https://binarynights.com/blog/posts/forklift-3-4-security-update.html
• https://insinuator.net/2020/11/forklift-lpe/

Get alerted when CVE-2020-15349 or the next vulnerability affects your stack