A logic issue within macOS allows an application to bypass security checks and access user data that it should not be able to read. The flaw is categorized as a privilege‑elevation weakness, potentially enabling an attacker to obtain sensitive information from the affected device. The impact is the unauthorized disclosure of data, which could lead to privacy violations or compromise of user files.

Apple macOS systems running versions prior to macOS Tahoe 26.4 are affected. The issue was identified and fixed in the 26.4 update; any macOS releases before that version may still contain the logic flaw.

The CVSS score of 7.5 indicates a high severity impact, but the EPSS score of less than 1% suggests that real‑world exploitation is currently rare. The flaw does not appear in the CISA KEV catalog, further indicating that widespread exploitation is not yet observed. The likely attack vector is local: a malicious or compromised app executed on the user's machine could read protected data. Administrators should assess whether applications on the system could be tampered with and whether the risk of data exposure outweighs the likelihood of exploitation.