Medium severity · published Jan 22, 2026
CVE-2025-15523
TCC Bypass via Inherited Permissions in Bundled Interpreter in Inkscape.app
4.8
CVSS
0.2%
EPSS
No
On KEV
Description
MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions
granted by the user to the main application bundle. An attacker with local user access can
invoke this interpreter with arbitrary commands or scripts, leveraging the
application's previously granted TCC permissions to access user's files in privacy-protected folders without triggering user prompts. Accessing other resources beyond previously granted TCC permissions will prompt the user for approval in the name of Inkscape, potentially disguising attacker's malicious intent.
This issue has been fixed in 1.4.3 version of Inkscape.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Inkscape · Inkscape
before 1.4.3 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-15523
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-15523
cert.pl
https://cert.pl/en/posts/2026/01/CVE-2025-15523/
inkscape.org
https://inkscape.org/
More from Inkscape
7.8
CVE-2021-42704
Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code
6.3
CVE-2026-4980
Improper Restriction of XML External Entity Reference in Inkscape
5.5
CVE-2012-5656
The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection…
3.3
CVE-2021-42702
Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information
3.3
CVE-2021-42700
Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information