A permissions issue allows an application running with root privileges to read private information that should otherwise be restricted. The weakness is a classic Improper Access Control flaw, categorized as CWE‑284. With the correct privileges, an attacker could obtain confidential user data, undermining privacy and possibly enabling further malicious actions.

The vulnerability affects all macOS installations prior to the release of macOS Sequoia 15.1, which addressed the issue with additional restrictions. Users on any earlier macOS version that have not applied the 15.1 update are potentially vulnerable.

The CVSS score of 7.5 indicates a high severity problem. Exploitability is considered low, with an EPSS score of less than 1 percent, and the vulnerability is currently not listed in CISA’s KEV catalog. Attackers would need to execute or install malicious code with root privileges on the target machine; no remote exploitation vector is disclosed. The overall risk is moderate, driven primarily by the need for privileged access to exploit the flaw.