CVE-2025-9474: Mihomo Party

Medium severity, CVSS 4.5. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability was detected in Mihomo Party up to 1.8.1 on macOS. Affected is the function enableSysProxy of the file src/main/sys/sysproxy.ts of the component Socket Handler. The manipulation results in creation of temporary file with insecure permissions. The attack requires a local approach. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit is now public and may be used.

Affected products

• Mihomo Party: version 1.8.0 only; version 1.8.1 only

Published 2025-08-26. Last modified 2026-06-17.