CVE-2025-9474 Details

A local privilege escalation vulnerability has been identified in Mihomo Party versions prior to 1.8.1 on macOS. The issue arises in the Socket Handler component, specifically within the 'enableSysProxy' function of 'src/main/sys/sysproxy.ts'. The vulnerability allows the creation of a temporary file with insecure permissions, which can be exploited by local attackers. The root cause is the exposure of a root-owned UNIX socket at '/tmp/mihomo-party-helper.sock', which has world-readable and writable permissions. This socket accepts unauthenticated HTTP requests to modify system-wide proxy settings, enabling attackers to route traffic through an attacker-controlled server, potentially leading to man-in-the-middle attacks and data exfiltration.