# Interpreter-Mediated Privilege Transduction Interpreter-mediated privilege transduction occurs when lower-trust script text, options, environment variables, or command-line state changes program flow after crossing into an interpreter running beneath a more privileged parent. ## Authority source The interpreter does not manufacture privilege. Exceptional authority comes from the user identity, parent process, entitlement, capability, namespace, or installation context in which the interpreter is launched. [[CVE-2023-32369]] provides the archive’s clearest public example: Bash and [[Perl]] processes inherited an Apple SIP-bypass entitlement from a privileged migration daemon, allowing interpreter-controlled state to affect protected locations. ## Evidence required Recover the exact interpreter and script versions, environment, arguments, parent process, entitlements, timestamps, output, and resulting filesystem changes. ## Source [[InstallESD.dmg#Perl, hidden arguments, and Migraine|InstallESD.dmg — Perl, hidden arguments, and Migraine]].