CVE-2025-64724

CVE-2025-64724 describes a privilege escalation vulnerability in Arduino IDE for macOS, affecting versions prior to 2.3.7. The flaw stems from world-writable file permissions on sensitive application components, allowing a local attacker to replace legitimate files with malicious code. This enables privilege escalation and unauthorized data access when another user launches the compromised application, carrying a CVSS score of 7.3 (HIGH) due to its low attack complexity and high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.