The vulnerability is a permissions issue that allowed an application with root privileges to read data that should otherwise be restricted. Additional restrictions were added to prevent the abnormal access, and the weakness is identified as CWE–863, a failure to enforce permission checks.

Apple macOS versions prior to the fix are affected. The issue is resolved in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1. Systems running any earlier release of these operating systems may be vulnerable.

The CVSS score is 4.4, indicating low severity, and the EPSS score is below 1 %, meaning the likelihood of exploitation is very small. The vulnerability is not listed in CISA KEV. Based on the description, it is inferred that an attacker would need an existing foothold that provides root privileges to exploit this flaw, which typically results from a prior compromise. Because the flaw merely escalates the privilege level already held, the overall risk remains limited.