Yandex Telemost Uncontrolled Search Path Element Vulnerability Allowing Search Order Hijacking on MacOS

A vulnerability in Yandex Telemost for Desktop on MacOS, prior to version 2.19.1, allows for search order hijacking due to an uncontrolled search path element. This issue could be exploited to manipulate the order in which libraries are loaded, potentially leading to the execution of malicious code.

Impact

Exploitation of this vulnerability could result in search order hijacking, allowing an attacker to control the loading of dynamic libraries and potentially execute arbitrary code.

Remediation

Users can upgrade to Yandex Telemost version 2.19.1 or later to address this vulnerability.