CVE-2025-57489

8.1 highEPSS 0.3%

High (8.1) in shirt-pocket superduper\!. EPSS 0.3% chance of exploitation in the next 30 days.

Incorrect access control in the SDAgent component of Shirt Pocket SuperDuper! v3.10 allows attackers to escalate privileges to root due to the improper use of a setuid binary.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-12-01
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

shirt-pocket:superduper\!

References

https://shirt-pocket.com/SuperDuper/SuperDuperDescription.html
https://www.shirtpocket.com/blog/index.php/shadedgrey/comments/superduper_security_update_v311/

Check your stack JSON