CVE-2017-15358: Charlesproxy Charles

High severity, CVSS 7.0. EPSS: 0.8% chance of exploitation in the next 30 days.

Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privileges via vectors involving the --self-repair option.

Affected products

• Charlesproxy Charles: before 4.2.1 (fixed in 4.2.1)

Published 2018-08-03. Last modified 2026-06-17.