CVE-2026-19755: NoSleep 1.5.1 Unauthorized File Disclosure via Privileged XPC Service with POC

Vulnerability Overview Vulnerability Name: NoSleep 1.5.1 – Unauthorized disclosure of root-owned files through privileged XPC helper CVE ID: CVE-2026-19755 CVSS Score: 6.9 (Medium) Vulnerability Type: 201. Unauthorized access to files Affected Product: NoSleep 1.5.1 Description: NoSleep 1.5.1 installs a root LaunchDaemon named . This service exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled commands and values. The service does not verify the audit token, code signature, Team ID, designated requirements, bundle identifier, effective user, or any equivalent authorization attributes of the connecting process before dispatching the command. Impact File Disclosure: Initially root-owned files that are only readable by root become disclosed. Permission Changes: Recursive unauthorized changes to file ownership and permissions. Loss of Confidentiality: Confidentiality loss of credentials, configuration files, tokens, or other secrets located in reachable target directories. Integrity and Availability Impact: Occurs when required permissions or permission metadata are modified. Denial of Service: Denial of service caused by unauthorized or requests. Remediation Update Software: Upgrade to the latest version of NoSleep, which has patched this vulnerability. Permission Management: Ensure the XPC service properly validates the authorization attributes of connecting processes. Filesystem Traversal: Improve filesystem traversal logic to prevent symbolic link attacks. Proof of Concept (PoC) Code XPC Client Code Exploitation Script Build XPC Client Create Disposable Root-Owned File Expected Initial State Invoke Helper as Normal User Observations Exploitation Evidence Video: Video evidence of the exploitation is provided. --- The above is a summary of the key information regarding the NoSleep 1.5.1 vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-19755: NoSleep 1.5.1 Unauthorized File Disclosure via Privileged XPC Service with POC