Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-19755

NoSleep 1.5.1 - Unauthorized disclosure of root-owned files through privileged XPC helper

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Fluid Attacks

Description

NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled command and NSBundlePath values.This issue affects NoSleep: 1.5.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NoSleep NoSleep

Default version status: unaffected

  • 1.5.1affected

References