RCE in Bjango Istats

CVE-2025-11921

iStats contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via command injection.This issue affects iStats: 7.10.4.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.006 (46.4th percentile) — read the EPSS interpretation.