CVE-2024-0068 is a Medium severity (CVSS 5.5) link following flaw in HYPR Workforce Access on macOS, which allows file manipulation. It affects versions before 8.7.1, and HYPR fixed it in 8.7.1. Upgrade every macOS install to 8.7.1 or later, since the advisory lists no workaround.
What's affected
- Product: HYPR Workforce Access on macOS.
- Affected versions: earlier than 8.7.1.
- Fixed version: 8.7.1.
- Severity: Medium in both the NVD record (CVSS 5.5) and the HYPR advisory. I found no conflict between them.
- Workaround: none listed. The advisory's only remediation is to move to 8.7.1 or later.
- Exploitation: the record's KEV flag is false, and the advisory does not report exploitation.
How to check if you're exposed
Find the app version on each Mac. On one machine, select the app in Finder, choose Get Info and read the version. For a fleet, use your device management or endpoint inventory to list installed applications and their versions, and filter for Workforce Access below 8.7.1.
If you cannot tell which Macs have the app, start from the team that administers passwordless login for your workforce, since that team usually knows where it was deployed.
What to do now
- List Macs with HYPR Workforce Access installed and their versions.
- Upgrade every install below 8.7.1 to 8.7.1 or later.
- Confirm the new version after the update, and remove stale installs on retired machines.
- Limit local standard user accounts on shared Macs, because the weakness is local and needs user interaction.
Why it matters
The record maps this to CWE-59 (CWE-59), improper link resolution before file access, often called link following. A program that follows a symbolic link without checking where it points can read or write a file the author never intended. If the program runs with more privilege than the user, that gap lets the user steer privileged file operations.
The CVSS vector is local, with high attack complexity, low privileges and required user interaction, which explains the Medium score. Authentication software still deserves attention, because a file change on a machine that manages sign in can have effects beyond the file itself.
One practical point for owners of the tool: because the issue is local, it matters most on shared or unmanaged Macs, where several people can log in or where users hold extra rights. On a single user laptop with tight controls, the risk is lower, but the fix is a routine version bump, so there is little reason to wait. Keep your endpoint inventory current, so the next advisory for a desktop agent takes minutes to scope instead of days.
Quick check
Which version fixes CVE-2024-0068?
HYPR Workforce Access 8.7.1. Versions before 8.7.1 on macOS are affected.
Is there a workaround?
The advisory lists none. Upgrade to 8.7.1 or later.
Sources
Last reviewed: 19 October 2026.
