← All advisories

High severity7.8NVD Advisory· Published Mar 4, 2026· Updated Jun 17, 2026

CVE-2025-70341

CVE-2025-70341

Description

Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files.

Affected products

3

App Auto Patch/App Auto Patch3 versions
cpe:2.3:a:app-auto-patch:app-auto-patch:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:app-auto-patch:app-auto-patch:*:*:*:*:*:*:*:*range: <=3.4.2
- (no CPE)range: <3.4.2
- (no CPE)

Patches

Vulnerability mechanics

References

3

github.com/App-Auto-Patch/App-Auto-Patch/pull/202nvdPatch
github.com/App-Auto-Patch/App-Auto-Patch/blob/main/App-Auto-Patch-via-Dialog.zshnvdProduct
github.com/App-Auto-Patch/App-Auto-Patch/issues/203nvdIssue Tracking

News mentions

0

No linked articles in our index yet.