Grahampugh Erase-install vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Grahampugh Erase-install: 1 record(s), with affected versions and fixes.cpe:2.3:a:grahampugh:erase-install
CVE-2025-70342
Medium · 6.6
CWE-732 Mar 4, 2026
Incorrect Permission Assignment for Critical Resource in Grahampugh Erase-install
erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json. This allows an unauthenticated attacker to intercept admin credentials entered during reinstall/erase operations via creating a named pipe.