Vulnerability · Published May 27, 2025 · Assigned by CERT-PL

CVE-2025-4412TCC Bypass via Dylib Loading in Viscosity.app

Medium 4.8

In plain English

A medium-severity incorrect default permissions in Viscosity from SparkLabs. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).

Severity (CVSS 4.0)4.8Medium

Exploit odds (30 days)0.2%top 94.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

On macOS systems, by utilizing a Launch Agent and loading the viscosity_openvpn process from the application bundle, it is possible to load a dynamic library with Viscosity's TCC (Transparency, Consent, and Control) identity. The acquired resource access is limited without entitlements such as access to the camera or microphone. Only user-granted permissions for file resources apply. Access to other resources beyond granted-permissions requires user interaction with a system prompt asking for permission. This issue was fixed in version 1.11.5 of Viscosity.

Affected products (as reported)

Vendor	Product	Versions
SparkLabs	Viscosity	0 – through 1.11.4

Weakness: CWE-276 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

References

https://cert.pl/en/posts/2025/05/tcc-bypass/ third-party-advisory
https://www.sparklabs.com/viscosity/ product