CVE-2025-65843

CVE-2025-65843 describes an insecure file handling vulnerability in Aquarius Desktop 3.0.069 for macOS. The application's support data archive generation feature follows symbolic links within the ~/Library/Logs/Aquarius directory, treating them as regular files. This allows a local attacker to create symlinks to arbitrary files, leading to unauthorized disclosure or modification of data, with potential for root-owned file exposure when chained with a privilege escalation vulnerability. The vulnerability has a CVSS score of 7.7 (HIGH), indicating a local attack vector with low complexity and high impact on confidentiality and integrity. The EPSS and FAUCET Risk Score also highlight its significant risk. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules or proof-of-concept code (Metasploit, Nuclei, ExploitDB). Community discussion and media coverage for this CVE are also minimal.