Tophat Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Tophat versions prior to 2.5.1. The issue arises because the 'arguments' query parameter is passed unsanitized from URL parsing to execution via '/bin/bash -c'. This allows an attacker to execute arbitrary commands on a developer's macOS workstation. The vulnerability is triggered by crafted 'tophat://' or 'http://localhost:29070' URLs. Commands executed through this vulnerability run with the user's permissions. Developers with Tophat installed are affected, and for previously trusted build hosts, no confirmation dialog is presented.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected user's macOS workstation, with the executed commands running under the user's permissions.

Remediation

Users are advised to update Tophat to version 2.5.1 or later. If an immediate update is not possible, manually inspect all Tophat URLs for malicious arguments before clicking.