CVE-2025-10906 — A flaw has been found in Magnetism Studios Endurance up to 3.3.0 on macOS.

Description

A flaw has been found in Magnetism Studios Endurance up to 3.3.0 on macOS. This affects the function loadModuleNamed:WithReply of the file /Applications/Endurance.app/Contents/Library/LaunchServices/com.MagnetismStudios.endurance.helper of the component NSXPC Interface. Executing manipulation can lead to missing authentication. The attack needs to be launched locally. The exploit has been published and may be used.

References

• https://github.com/SwayZGl1tZyyy/n-days/blob/main/Endurance/README.md
• https://github.com/SwayZGl1tZyyy/n-days/blob/main/Endurance/README.md#proof-of-concept
• https://vuldb.com/?ctiid.325691
• https://vuldb.com/?id.325691
• https://vuldb.com/?submit.653994