CVE-2021-41388

CVE-2021-41388 is a local privilege escalation vulnerability affecting Netskope client versions prior to 89.x on macOS. The vulnerability stems from the nsAuxiliarySvc process's XPC implementation failing to validate new connections, allowing any low-privileged user to connect and execute external methods as root. With a CVSS score of 7.8 (HIGH), this flaw permits an attacker to achieve full compromise of confidentiality, integrity, and availability on an affected system with low attack complexity and no user interaction required. Despite its high severity, there is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.