The vulnerability is a permissions flaw that permits an application to gain unauthorized access to system resources by escaping the sandbox imposed by macOS. The flaw is linked to CWE-284, a weakness that allows privilege escalation through improper access control. Because the sandbox is designed to isolate applications, an escape could provide an attacker with the ability to read or modify data outside the application’s allowed scope, potentially compromising user data and system integrity.

Apple macOS users are affected. Versions of macOS Tahoe released before the 26.1 update contain the flaw; the fix is included in macOS Tahoe 26.1 and later releases. The specific CPE indicates the issue applies broadly across macOS products.

The CVSS score of 5.2 indicates moderate severity, while the EPSS score of less than 1% signifies a very low, yet non-zero, likelihood of current exploitation. The vulnerability is not listed in the CISA KEV catalog. Attackers would likely need local or application-level access to exploit the sandbox escape, suggesting a physical or user-controlled entry point is required.