A permissions issue allows an application to read data that should be protected, potentially exposing sensitive user files or personal information. The vulnerability is a classic improper access control flaw that can be exploited by any app that gains the capability to bypass standard sandbox or security checks. It does not grant remote code execution or system compromise but can lead to data leaks with serious privacy implications.

Apple macOS systems running versions prior to macOS Tahoe 26.1 are affected. The fix was implemented in macOS Tahoe 26.1, so any earlier releases remain vulnerable.

The EPSS score is not available, so the overall likelihood of exploitation cannot be quantified. The vulnerability is not listed in CISA KEV, suggesting no publicly known active exploitation. Attackers would likely need local or privileged access to install or run a malicious application that leverages this permissions flaw; remote exploitation is not indicated by the description.