CVE-2025-11921: Bjango Istats

High severity, CVSS 8.5. EPSS: 0.6% chance of exploitation in the next 30 days.

iStats contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via command injection.This issue affects iStats: 7.10.4.

Affected products

• Bjango Istats: version 7.10.4 only

Published 2025-11-24. Last modified 2026-06-17.