An access issue in macOS sandbox restrictions allows an application to connect to a network share without obtaining user consent. This flaw could let malicious or unintended programs access shared resources, potentially exposing sensitive data or enabling further attacks, and it is classified as CWE‑693.

The vulnerability affects Apple macOS systems. Versions requiring remediation include macOS Sequoia prior to 15.7.5, macOS Sonoma prior to 14.8.5, and macOS Tahoe prior to 26.4.

With a CVSS base score of 7.5, the flaw is considered high severity. The EPSS score is under 1%, indicating a low likelihood of exploitation at present, and the vulnerability is not listed in the CISA KEV catalog. Attackers would likely need to run a malicious or compromised application locally on the affected machine to trigger the unauthorized network connection, making the attack vector inferred rather than explicitly documented.