A logging flaw in macOS allowed an application to read sensitive user data from log files where redaction should have occurred. The primary impact is the disclosure of confidential information, which could be used by malicious actors to compromise user privacy or facilitate further attacks. The weakness involves improper filtering of sensitive data before it is written to logs, analogous to documented instances of data leakage in log files.

Products affected are Apple macOS operating systems, specifically versions prior to macOS Tahoe 26.1. The issue was resolved in macOS Tahoe 26.1 and subsequent releases. Users running earlier releases remain vulnerable to potential data exposure.

The vulnerability is classified as an information exposure, giving attackers read access to sensitive data. There is no publicly reported exploitation technique, and the EPSS score is < 1%. The vulnerability is not listed in CISA’s KEV catalog. Since the flaw involves log data, any application that can read the system logs and is granted the necessary execution privileges on the affected system could exploit it. The CVSS score of 5.5 indicates a moderate level of risk, yet the potential to leak user data remains significant until patched.