A permissions flaw allows a malicious or improperly designed application to acquire root privileges on affected Apple macOS installations. The vulnerability is rooted in a failure of the operating system to enforce adequate restrictions, as classified under CWE‑862. Attackers who can run or influence a local application may leverage this deficiency to elevate their privileges, potentially compromising system integrity and confidentiality.

Apple’s macOS is impacted, including the Sonoma and Tahoe operating system families. Vulnerable releases are those prior to macOS Sonoma 14.8 and macOS Tahoe 26; updates to these releases contain a fix that imposes the necessary restrictions.

The CVSS score of 7.8 indicates a high severity potential. The EPSS score of less than 1 % suggests a very low probability of exploitation at the time of this analysis, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is local, wherein an application running with user privileges can trigger the permissions flaw to gain root. No remote exploitation pathway is documented in the available description.