Medium severity · published Dec 3, 2025
CVE-2025-55076
A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS
6.2
CVSS
0.2%
EPSS
No
On KEV
Description
A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS. The service accepts unauthenticated XPC connections and executes input via system(), which may allow a local user to execute arbitrary commands with root privileges.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Installation Manager · Plugin-alliance
1.4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-55076
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-55076
Exploit
https://almightysec.com/plugin-alliance-helpertool-xpc-service-local-privilege-escalation/
More from Installation Manager
6.2
CVE-2025-62686
A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS