Termius Arbitrary Code Execution Vulnerability on macOS via DYLD_INSERT_LIBRARIES

A vulnerability in Termius for macOS, prior to version 9.9.0, allows local attackers to execute arbitrary code. This is achieved by injecting a crafted script into the DYLD_INSERT_LIBRARIES environment variable, which is then executed by the Termius application.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Reproduction

To reproduce this vulnerability, set the DYLD_INSERT_LIBRARIES environment variable to a malicious dynamic library that contains the desired payload. Then, launch the Termius application from the command line. The injected library will be loaded by the application, allowing the execution of the embedded code.