CVE-2025-31194 is a critical authentication vulnerability in macOS where a Shortcut may execute with administrative privileges without requiring authentication. This issue was addressed by improved state management and is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5.