CVE-2025-15523: TCC Bypass via Inherited Permissions in Bundled Interpreter in Inkscape.app

Severity: medium (CVSS 4.8 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-01-22 · updated 2026-06-17
Weakness: CWE-276

Description

MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application's previously granted TCC permissions to access user's files in privacy-protected folders without triggering user prompts. Accessing other resources beyond previously granted TCC permissions will prompt the user for approval in the name of Inkscape, potentially disguising attacker's malicious intent. This issue has been fixed in 1.4.3 version of Inkscape.

Affected products

Inkscape: before 1.4.3 — fixed in 1.4.3

How to fix

Upgrade to a fixed version: Inkscape 1.4.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-15523 or the next vulnerability affects your stack