Grahampugh maintains a focused macOS administration tool, erase_install, that handles system deployment and erasure workflows in enterprise environments. The observed vulnerability signal centers on improper permission assignment for critical resources, a structural concern in tooling that operates at elevated privilege levels. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Grahampugh over time
Signals from CVEs in this vendor scope (1 CVEs).
1 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-70342MEDIUM erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json. This allows an unauthenticated attacker to intercept admi | Mar 4, 2026 | 6.6 | 23 | NO | NO |
Signals from CVEs in this vendor scope (1 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Grahampugh.
Media articles that mention a CVE ID that affects a product developed by Grahampugh — matched by CVE ID, not by vendor name.