The vulnerability, encompassing CWE-353 and CWE-354, allows a maliciously modified application bundle to launch on macOS because the system lacks sufficient integrity checks. Without proper verification of the app’s code signing and package integrity, an attacker could substitute or alter an existing application with malicious code that would run without further authentication. This flaw can lead to the execution of unauthorized code, potentially compromising system confidentiality, integrity, and availability.

Apple macOS versions prior to macOS Golden Gate 27 are affected. The fix introduced additional app bundle integrity checks in macOS 27, preventing modified bundles from launching.

The EPSS score is < 1% and the vulnerability is not listed in CISA's KEV catalog, indicating limited evidence of exploitation in the wild. The CVSS score of 7.5 reflects moderate to high severity. Inferred attack access likely requires the attacker to have local file‑system write permissions to replace or modify an application bundle, a scenario that typically requires user interaction or prior compromise. While the lack of publicly known exploits suggests a lower immediate risk, the ability to execute modified code locally remains a serious concern for end‑users who run or install software from unverified sources.