SuperDuper! vulnerabilities
3 known CVE vulnerabilities in SuperDuper!, translated and rated.
- CVE-2025-69604High
A vulnerability in SuperDuper! 3.11 and earlier allows a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thereby bypassing macOS privacy controls.
- CVE-2025-61229High
A vulnerability in Shirt Pocket SuperDuper! 3.10 and earlier allows a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thereby bypassing macOS privacy controls.
- CVE-2025-61228High
A vulnerability in Shirt Pocket SuperDuper! version 3.10 and earlier allows a local attacker to execute arbitrary code via the software update mechanism.

