The Canva for Mac desktop application, prior to version 1.117.1, has a critical vulnerability that allows local threat actors with unprivileged access to execute arbitrary code. This security flaw arises from the absence of Hardened Runtime in the Mac App Store distribution, enabling attackers to leverage the app's TCC (Transparency, Consent, and Control) permissions. Users are advised to update to the latest version to mitigate this risk.
https://securityvulnerability.io/vulner ... 2025-12792