Admin By Request (ABR) vulnerabilities
We track 2 vulnerabilities in Admin By Request (ABR) products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.
2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score
Latest Admin By Request (ABR) vulnerabilities
- 7.8 High severity
Insufficient input validation in ABR allows a low-privileged user to inject malicious entries…
Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.
- 8.8 High severity
Admin By Request (ABR): Improper Access Control
An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication (XPC) while masquerading as an Apple-signed process.