CVE-2025-57489

This PoC exploits a privilege escalation vulnerability in SuperDuper! v3.10 by leveraging the setuid SDAgent component, which improperly handles shell commands without verifying the requesting application. The exploit uses a named pipe to inject arbitrary commands, achieving root execution.