Researchers Warn macOS textutil and KeePassXC Can Become Attack Primitives in Automation

Cipher Security Labs found that macOS textutil will fetch remote resources referenced in HTML inputs—creating an SSRF-like primitive in automated conversion pipelines—and that KeePassXC will perform attacker-controlled, expensive KDF work defined in KDBX metadata, enabling resource-exhaustion attacks against batch-processing systems; both are design/trust-boundary issues (not memory or crypto failures) and the report provides mitigation recommendations including sandboxing, input sanitization, egress restrictions, and KDF parameter limits.