CVE-2025-9815

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-9815
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9815.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-9815
Published
2025-09-02T04:32:06.302Z
Modified
2026-07-15T01:49:12.304664456Z
Severity
  • 7.1 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
alaneuler batteryKid NSXPCListener PrivilegeHelper.swift missing authentication
Details

A weakness has been identified in alaneuler batteryKid up to 2.1 on macOS. The affected element is an unknown function of the file PrivilegeHelper/PrivilegeHelper.swift of the component NSXPCListener. This manipulation causes missing authentication. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be exploited.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9815.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "2.0"
                },
                {
                    "last_affected": "2.0"
                },
                {
                    "introduced": "2.1"
                },
                {
                    "last_affected": "2.1"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-287",
        "CWE-306"
    ]
}
References

Affected packages

Git / github.com/alaneuler/batterykid

Affected ranges

Type
GIT
Repo
https://github.com/alaneuler/batterykid
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f163b4a5c3c9b244b841c60483932a77c8849b5a
Database specific 
{
    "cpe": "cpe:2.3:a:alaneuler:batterykid:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1"
        }
    ]
}

Affected versions

v1.*
v1.0.0
v1.0.1
v1.1.0
v1.1.1
v2.*
v2.0
v2.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9815.json"