This vulnerability originates from insufficient private data redaction in system logs, allowing a sandboxed application to read sensitive user information. The flaw is a privacy issue that may expose confidential data through local log files. Its impact is the potential disclosure of personal data such as session tokens, file paths, or identifiers, leading to loss of confidentiality.

Apple macOS systems prior to macOS Sequoia 15.4 are potentially affected. Users running older releases must check compatibility lists to determine if their version contains unrepaired log content.

The CVSS score of 5.5 indicates moderate severity, while an EPSS score below 1% suggests a low likelihood of exploitation currently. It is not listed in the CISA KEV catalog, and the attack is inferred to be local: a sandboxed application with read access to system logs can exploit the flaw. No remote exploitation vector is documented, and the vulnerability requires that logs contain unredacted sensitive data.