An access issue within macOS's sandbox environment allowed a malicious application to read sensitive user data. The flaw bypasses additional sandbox restrictions and can lead to confidentiality violations if exploited, as the application may read protected files or information it should not access.

The vulnerability affects Apple macOS systems prior to the release of macOS Tahoe 26.1. Earlier macOS versions lack the sandbox enhancements that fix this issue, so any system running those versions is potentially impacted.

The CVSS score is 5.5 and EPSS information is unavailable, but the vulnerability permits a malicious app to retrieve confidential data, which represents a high confidentiality risk. The attack vector is inferred to be a locally executed or installed application able to exploit the sandbox bypass. With no KEV listing, the likelihood of public exploitation remains uncertain, yet the potential impact warrants prompt action.