CVE-2026-19755

NoSleep 1.5.1 - Unauthorized disclosure of root-owned files through privileged XPC helper PUBLISHED

Description (CNA)

NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled command and NSBundlePath values.This issue affects NoSleep: 1.5.1.

Affected (CNA)

Vendor / product	Versions
NoSleep / NoSleep	affected 1.5.1

CWE

CWE-862

References

https://fluidattacks.com/advisories/iggy
https://github.com/integralpro/nosleep/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.