ByteOS Network

Vulnerability Details :

CVE-2025-7961

Assigner Org ID-84fe0718-d6bb-4716-a7e8-81a6d1daa869

Published At-15 Aug, 2025 | 16:43

Updated At-15 Aug, 2025 | 17:14

KAP 3.6.0 - TCC Bypass

Improper Control of Generation of Code ('Code Injection') vulnerability in Wulkano KAP on MacOS allows TCC Bypass.This issue affects KAP: 3.6.0.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:Fluid Attacks

Assigner Org ID:84fe0718-d6bb-4716-a7e8-81a6d1daa869

Published At:15 Aug, 2025 | 16:43

Updated At:15 Aug, 2025 | 17:14

▼CVE Numbering Authority (CNA)

KAP 3.6.0 - TCC Bypass

Improper Control of Generation of Code ('Code Injection') vulnerability in Wulkano KAP on MacOS allows TCC Bypass.This issue affects KAP: 3.6.0.

Affected Products

Vendor

Wulkano

Product

KAP

Platforms

MacOS

Default Status

unaffected

Versions

Affected

3.6.0 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-94	CWE-94 Improper Control of Generation of Code ('Code Injection')

Type: CWE

CWE ID: CWE-94

Description: CWE-94 Improper Control of Generation of Code ('Code Injection')

Metrics

Version	Base score	Base severity	Vector
4.0	6.9	MEDIUM	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N

Version: 4.0

Base score: 6.9

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N

Impacts

CAPEC ID	Description
CAPEC-242	CAPEC-242 Code Injection

CAPEC ID: CAPEC-242

Description: CAPEC-242 Code Injection

References

Hyperlink	Resource
https://fluidattacks.com/advisories/cafrune	third-party-advisory
https://github.com/wulkano/Kap	product
http://wulkano.com/	related
https://getkap.co/	product

Hyperlink: https://fluidattacks.com/advisories/cafrune

Resource:

third-party-advisory

Hyperlink: https://github.com/wulkano/Kap

Resource:

product

Hyperlink: http://wulkano.com/

Resource:

Hyperlink: https://getkap.co/

Resource:

product

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:help@fluidattacks.com

Published At:15 Aug, 2025 | 17:15

Updated At:18 Aug, 2025 | 20:16

Improper Control of Generation of Code ('Code Injection') vulnerability in Wulkano KAP on MacOS allows TCC Bypass.This issue affects KAP: 3.6.0.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	6.9	MEDIUM	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Secondary

Version: 4.0

Base score: 6.9

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X