CyberRota Analysis
AI-GeneratedThe vulnerability affects Electron applications on macOS that rely on a check to ensure they are launched by a same-signed parent process, which can be bypassed by a local attacker. This could allow the attacker to execute arbitrary code within the context of the signed app, potentially gaining access to sensitive TCC permissions and keychain data. Developers using affected versions of Electron should prioritize updating to the fixed releases (39.8.8, 40.9.0, 41.2.1, or 42.0.0-beta.3) to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that enable fuse-based hardening restricting ELECTRON_RUN_AS_NODE and NODE_OPTIONS to same-signed parents rely on this check, and a local attacker could bypass it and run code inside the signed app, inheriting its TCC permissions and keychain access. This issue is fixed in 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3.