A permissions flaw in macOS allows a malicious application to obtain root privileges by bypassing additional restrictions. The vulnerability is classified as a privilege escalation weakness (CWE‑863) and can lead to full system compromise. Once root access is gained, an attacker can alter system files, install software, or exfiltrate data without detection.

Apple macOS is affected, specifically all releases prior to macOS Sequoia 15.7.2 and macOS Tahoe 26.1. Users running earlier versions of these operating systems are at risk.

The CVSS score of 7.8 indicates high severity, but the EPSS score of less than 1% shows very low public exploitation probability at this time. The vulnerability is not listed in the CISA KEV catalog, suggesting it has not been widely abused yet. The likely attack vector is a local privilege escalation triggered by a malicious application that can be installed on the device, after which controlled exploitation can lead to system‐wide compromise.