A logic issue was identified in macOS that may enable an application to read sensitive user data. The flaw is a flaw in internal restrictions, not a direct vulnerability such as exploit code, but it could allow privileged operations otherwise unavailable to applications. The primary impact is the potential leakage or compromise of confidential information stored on the device. The weakness underlying this issue is improper authorization checks, which would allow an app to perform actions it should not be able to perform.

The affected product is Apple macOS. Versions prior to macOS Tahoe 26 are impacted. The fix has been introduced in macOS Tahoe 26, so any installations older than that version are susceptible.

The EPSS score remains unavailable, and the vulnerability is not listed in CISA KEV. The CVSS score of 5.5 indicates medium severity, suggesting that while the flaw is not high‑risk, it can still lead to unauthorized access to sensitive data. Because there is no publicly disclosed exploitation evidence, the exact likelihood of exploitation cannot be quantified. Nevertheless, the logic flaw could be leveraged if an attacker can install a malicious application or otherwise manipulate the restricted area; the description implies that the application could access data that should be protected.