CVE-2021-3187: BeyondTrust Privilege Management For Mac

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.)

Affected products

• BeyondTrust Privilege Management For Mac: before 5.7 (fixed in 5.7)

Published 2023-12-11. Last modified 2026-06-17.