The vulnerability originates from a logic flaw in macOS file handling that permits a local application to bypass standard permission checks. The flaw was corrected in recent releases—macOS Sequoia 15.4, Sonoma 14.7.5, and Ventura 13.7.5—so any system running an older or unpatched version remains susceptible to escalation of privileges. An attacker could exploit this issue to elevate an app’s rights to the root user, potentially compromising system integrity and confidentiality.

Apple macOS is affected. Versions prior to the stated fixes—macOS Sonoma prior to 14.7.5, macOS Ventura prior to 13.7.5, and older releases—are vulnerable. Any system running an older or unpatched release remains at risk until the update is applied.

The CVSS score of 7.8 signifies a high severity issue. EPSS is listed as less than 1%, indicating a low likelihood of exploitation at this time, and the vulnerability is not in the CISA KEV catalog. The attack vector is likely local, requiring an application with sufficient local privileges to trigger the logic flaw. If such an app is present, it could elevate its privileges to root without user interaction.