CVE-2025-15523

CVE-2025-15523 affects the MacOS version of Inkscape, where its bundled Python interpreter inherits the application's Transparency, Consent, and Control (TCC) permissions. This allows a local attacker to execute arbitrary commands or scripts, leveraging Inkscape's TCC permissions to access privacy-protected user files without prompts. Rated Medium (CVSS 4.8), the vulnerability has low attack complexity and requires local user access, potentially leading to limited confidentiality and integrity impacts. There is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, though it has garnered significant community discussion.