{"id":63955,"date":"2025-08-10T13:41:20","date_gmt":"2025-08-10T13:41:20","guid":{"rendered":""},"modified":"2025-08-30T20:33:42","modified_gmt":"2025-08-31T02:33:42","slug":"cve-2024-7457-macos-authorization-model-exploit-leading-to-potential-mitm-attacks","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2024-7457-macos-authorization-model-exploit-leading-to-potential-mitm-attacks\/","title":{"rendered":"CVE-2024-7457: macOS Authorization Model Exploit Leading to Potential MITM Attacks<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

CVE-2024-7457 is a critical vulnerability found in the ws.stash.app.mac.daemon.helper tool used on macOS systems. This vulnerability stems from an incorrect use of macOS\u2019s authorization model, potentially affecting all macOS users who have this tool installed. The implications of this vulnerability are severe as it can lead to unauthorized changes to system-wide network preferences and man-in-the-middle (MITM) attacks which can compromise the entire system and lead<\/a> to data leakage.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2024-7457
\nSeverity: High (7.8 CVSS Score)
\nAttack Vector: Local
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Unauthorized changes to system-wide network preferences, potential man-in-the-middle (MITM) attacks, system compromise<\/a>, and data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n