CVE-2025-31258

MEDIUM

macOS < 15.5 - Sandbox Escape via Vulnerable Code Removal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2025-31258. PoCs published by wh1te4ever, adminlove520, sureshkumarsat.

AI-analyzed exploit summary The repository contains only a README.md with minimal information about CVE-2025-31258, mentioning a partial sandbox escape via RemoteViewServices. No actual exploit code or technical details are provided.

Description

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to break out of its sandbox.

Exploits (3)

nomisec STUB 42 stars
by wh1te4ever · poc
https://github.com/wh1te4ever/CVE-2025-31258-PoC

The repository contains only a README.md with minimal information about CVE-2025-31258, mentioning a partial sandbox escape via RemoteViewServices. No actual exploit code or technical details are provided.

Classification
Stub 30%
Attack Type
Other
Complexity
Theoretical
Reliability
Theoretical
Target: unspecified (likely involves RemoteViewServices)
No auth needed
Prerequisites: unknown due to lack of details
devstral-2 · analyzed Feb 16, 2026 Full analysis →
github WORKING POC 2 stars
by adminlove520 · pythonpoc
https://github.com/adminlove520/CVE-Poc_All_in_One/tree/main/2025/CVE-2025-31258

This repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: TOTOLINK LR350, TOTOLINK T6, Fortinet SSL VPN
No auth needed
Prerequisites: network access to the target device
devstral-2 · analyzed Feb 27, 2026 Full analysis →
nomisec STUB
by sureshkumarsat · poc
https://github.com/sureshkumarsat/CVE-2025-31258-PoC

The repository contains only a README.md file with no exploit code or technical details related to CVE-2025-31258. It appears to be a placeholder or unrelated content.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: unknown
No auth needed
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Release Notes, Vendor Advisory
https://support.apple.com/en-us/122716

Scores

CVSS v3 6.5
EPSS 0.0035
EPSS Percentile 27.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-284
Status published
Products (2)
apple/macos < 15.5
Apple/macOS < 15.5
Published May 12, 2025
Tracked Since Feb 18, 2026