CVE-2015-5889

CVE-2015-5889 is a local privilege escalation vulnerability affecting Apple OS X before version 10.11, specifically within the rsh component of remote_cmds. An attacker can exploit this flaw by manipulating environment variables to gain root privileges on the compromised system. With a CVSS score of 7.2 (High), this vulnerability has a low attack complexity and requires local access, but allows for complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, exploit code is publicly available on ExploitDB and a Metasploit module exists, indicating a high potential for exploitation. Despite this, there is minimal community discussion or media coverage surrounding this CVE.