The vulnerability is a state‑management flaw that allows an attacker who already has root privileges to delete protected system files, potentially compromising the integrity of the operating system.

The flaw affects macOS operating systems prior to the release of Sequoia 15.7.4 and Sonoma 14.8.4; any installation that has not been updated to these versions is considered vulnerable.

The CVSS score of 6 indicates moderate severity, and the EPSS score of less than 1% shows a very low probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog, and it requires local root access; thus the attack vector is limited to environments where an attacker can already obtain or holds root privileges.