TI-2025-04665 Aliases CVE-2025-5199

LPE on Multipass for macOS

HIGH 69CWE-276Published 2025-07-11 · Updated 2025-07-14

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-863.

Summary

In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker to escalate privileges by modifying files executed with administrative privileges by a Launch Daemon during system startup.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00174 6th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed Multipass (Canonical): 1.16.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Canonical	Multipass	before 1.16.0	1.16.0	Patch available	CNA

Multipass VendorCanonical Affected before 1.16.0 Fixed in 1.16.0 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:canonical:multipass::-::::::*	before 1.16.0	Vulnerable	Canonical
cpe:2.3:o:apple:macos:-:::::::*	not specified by NVD	Running on	Apple

cpe:2.3:a:canonical:multipass:*:-:*:*:*:*:*:* Versions before 1.16.0 Vulnerable ·Canonical
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Apple

Remediation

Fix · CNA Multipass (Canonical) Fixed in 1.16.0

Timeline

2026-10-02 Threatist record created from CVE-2025-5199

References

Exploit 1

https://github.com/canonical/multipass/security/advisories/GHSA-2j82-p5cq-62p3

Patch 1

https://github.com/canonical/multipass/pull/4115

TI-2026-36438 SFTP Server VM Escape in Canonical Multipass CVSS 3.1HIGH 8.4
TI-2021-02680 MacOS version of Multipass incorrect owner for application directory CVSS 3.1HIGH 8.8
TI-2021-02572 Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts CVSS 3.1HIGH 8.8
TI-2026-36437 Local Privilege Escalation in Canonical Multipass CVSS 3.1HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences