CVE-2025-70342

Published March 4th, 2026

View on NVD ↗

CVSS v3

6.6

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json. This allows an unauthenticated attacker to intercept admin credentials entered during reinstall/erase operations via creating a named pipe.

grahampugh/erase-install

A script that automates downloading macOS installers, and optionally erasing or upgrading macOS in a single process. Watch the video!

GitHub

939

malvector/CVE-2025-70342

CVE-2025-70342: Credential Interception via Named Pipe in erase-install

GitHub