A logic issue in macOS was exploited by a malicious application to gain root privileges. The flaw is duplicated across macOS Sequoia, Sonoma, and Tahoe platforms, and has been mitigated with improved checks. An attacker running an application that is tricked or designed to trigger the flaw can execute arbitrary system commands at the highest privilege level, enabling complete control over the affected machine.

Apple macOS users running a version earlier than macOS Sequoia 15.7, macOS Sonoma 14.8, or macOS Tahoe 26 are at risk. The affected operating systems span the Sequoia, Sonoma, and Tahoe releases, with the vulnerability addressed in the specified update releases.

The EPSS score is not available, but the vulnerability leads directly to local privilege escalation, giving attackers complete system access. The vulnerability is not listed in the CISA KEV catalog, indicating no known widespread exploitation at the time of analysis. The likely attack vector is the installation or execution of a malicious app that convinces macOS to apply the faulty logic, after which the attacker can elevate privileges. The absence of a publicly available exploit does not diminish the inherent risk of local privilege escalation once exploitation is achieved.