CVE-2025-9815

7.1 highEPSS 0.3%

High (7.1) in alaneuler batterykid. EPSS 0.3% chance of exploitation in the next 30 days.

A weakness has been identified in alaneuler batteryKid up to 2.1 on macOS. The affected element is an unknown function of the file PrivilegeHelper/PrivilegeHelper.swift of the component NSXPCListener. This manipulation causes missing authentication. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be exploited.

Severity

CVSS 4.0

7.1 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWEs: CWE-306, CWE-287
Published: 2025-09-02
Modified: 2026-09-26
Record from: the NVD, synced 2026-10-19

Affected

alaneuler:batterykid

References

https://github.com/SwayZGl1tZyyy/n-days/blob/main/batteryKid/README.md
https://github.com/SwayZGl1tZyyy/n-days/blob/main/batteryKid/README.md#proof-of-concepts
https://vuldb.com/?ctiid.322142
https://vuldb.com/?id.322142
https://vuldb.com/?submit.641358

Check your stack JSON