The flaw is an improper access control that permits an application to write to protected areas of the macOS file system that should be read‑only or otherwise restricted. This capability allows the app to alter system files or critical configuration data, which could lead to compromise of system integrity.

Apple macOS is affected when running versions older than Sequoia 15.7, Sonoma 14.8, or Tahoe 26. All users of these operating systems should upgrade to the latest release to eliminate the flaw.

The CVSS score of 5.5 indicates moderate severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating no documented public exploits at this time. However, the ability to modify protected system files represents a significant integrity risk. Based on the description, it is likely that the attack vector is local, where an application with appropriate permissions can modify protected areas.