An origin validation error in the self‑protection mechanism of Trend Micro Apex One for Mac can give a local attacker the ability to elevate privileges. The flaw causes the agent to fail to verify the source of an operation, allowing code that is initially run with low privileges to acquire higher authority. If successful, an attacker could gain full control of the machine, but the vulnerability requires local code execution as a prerequisite.

Trend Micro Apex One for Mac on macOS is affected. No specific product version is listed in the advisory; installations that have not received the mid‑late 2025 updates (SaaS 2507 or the 2005 Yearly Release) remain vulnerable.

The CVSS score of 7.8 signals high severity, yet the exploitability is constrained to local attackers who can already run code on the target. EPSS data is not available and the vulnerability is not in CISA KEV, indicating no known widespread exploitation. Nonetheless, if an attacker can introduce low‑privileged code, the local privilege escalation could be leveraged for broader damage.