Yandex Disk Uncontrolled Search Path Element Vulnerability Allowing Search Order Hijacking on MacOS

A vulnerability in Yandex Disk for Desktop on MacOS, prior to version 3.2.45.3275, allows for search order hijacking due to an uncontrolled search path element. This could potentially be exploited to manipulate the order in which directories are searched for executable files, leading to unintended execution of malicious code.

Impact

Exploitation of this vulnerability could lead to search order hijacking, allowing an attacker to control the order in which the system searches for files, potentially leading to the execution of malicious code.

Remediation

Users can upgrade to Yandex Disk version 3.2.45.3275 or later to address this vulnerability.