The batteryKid application for macOS contains a critical missing authentication vulnerability that allows local users to bypass security checks and potentially compromise system integrity.

This vulnerability involves a missing authentication flaw (CWE-306) within the NSXPCListener component of the PrivilegeHelper.swift file. The flaw allows an attacker with local access to the host to interact with the service without proper authentication.

The exploitation of this vulnerability results in high impact to confidentiality, integrity, and availability of the affected system. With a CVSS score of 7.8, this high-severity flaw poses a significant risk to organizations, as it could allow a malicious local actor to escalate privileges or perform unauthorized administrative tasks, leading to potential system compromise or data exfiltration.

Immediate Action: There is currently no vendor-provided patch available. Administrators should restrict local access to affected systems and monitor the environment for unauthorized execution of the batteryKid helper process.

Proactive Monitoring: Security teams should monitor system logs for unusual activity originating from the PrivilegeHelper component or unexpected calls to the NSXPCListener interface.

Compensating Controls: Implement strict host-based access controls to limit which users can execute applications on the affected macOS systems, thereby reducing the local attack surface.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the research write-up referenced by the CVE record.

Given the availability of a public proof-of-concept and the high severity of this missing authentication flaw, organizations should treat this as a priority. While a formal vendor patch is pending, administrators must implement compensating controls to restrict local access to the affected software to prevent potential exploitation.