What’s Vulnerable › Vulnerabilities

CVE-2024-10183: Arbitrary File Write Vulnerability in Jamf Remote Assist Leading to Privilege Escalation

• Severity: medium (CVSS 5.2 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-22 · updated 2026-06-17
• Weakness: CWE-276

Description

A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to escalate their privileges to root on MacOS systems.

Affected products

• Jamf Pro: from 11.1 through 11.5; from 1.0.0 through 1.3.0

References

• https://learn.jamf.com/en-US/bundle/jamf-remote-assist-release-notes/page/Jamf_Remote_Assist_Release_History.html#ariaid-title4

Get alerted when CVE-2024-10183 or the next vulnerability affects your stack