A critical authentication bypass vulnerability in Magnetism Studios Endurance allows local attackers to gain unauthorized access to privileged application functions.

The application fails to perform necessary authentication checks within the loadModuleNamed:WithReply function of the NSXPC interface. This flaw allows an unauthenticated local attacker to manipulate application logic by invoking unauthorized functions.

The exploitation of this vulnerability allows for the unauthorized execution of local functions within the Endurance application. Given the CVSS score of 8.4, the risk of local privilege escalation or arbitrary command execution is significant, potentially leading to a complete compromise of the application integrity on the affected macOS host.

Immediate Action: Since no official patch is currently available, users should restrict local access to the affected machine and monitor for suspicious process activity related to Endurance.

Proactive Monitoring: Security teams should monitor system logs for unusual XPC service calls or unexpected execution patterns originating from the Endurance helper process.

Compensating Controls: Implement strict file system permissions on the Endurance application bundle to prevent unauthorized local users from interacting with the vulnerable helper binary.

Public Exploit Available: Yes, a published proof-of-concept exists via the researcher write-up at the provided GitHub repository.

Due to the availability of a public proof-of-concept and the high severity of this authentication bypass, administrators must prioritize mitigating the risk by restricting access to the host. Users should monitor official vendor channels for security updates and apply them immediately upon release to remediate the underlying flaw in the NSXPC interface.