Apple Compressor Arbitrary Code Execution Vulnerability
Vulnerability
A vulnerability in Apple Compressor versions prior to 4.11.1 allows an unauthenticated user on the same network as a Compressor server to execute arbitrary code. This issue arises because the application previously accepted external connections by default.
Impact
Exploitation of this vulnerability could lead to unauthorized execution of arbitrary code on the Compressor server.
Remediation
Users can upgrade to Apple Compressor 4.11.1 to address this vulnerability. This version is available for macOS Sequoia 15.6 and later.
Added: Nov 13, 2025, 7:23 PM
Updated: Nov 13, 2025, 8:27 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
4.9remediation
7.7relevance
1.1threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.