CVE-2025-8672

CVE-2025-8672 is a high-severity vulnerability affecting GIMP on macOS, where its bundled Python interpreter inherits the application's TCC permissions. This allows a local attacker to execute arbitrary commands or scripts, gaining unauthorized access to privacy-protected user files without prompts, or potentially disguising malicious actions by triggering prompts in GIMP's name for other resources. With a CVSS score of 7.8 (High), the vulnerability is easily exploitable by a local user with low complexity, leading to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.