The vulnerability arises from insufficient enforcement of sandbox permissions, allowing an application to bypass network restrictions that should be upheld by macOS. This permits the app to send or receive network traffic beyond its intended sandbox, potentially exposing sensitive data or violating network isolation policies. While no direct remote code execution is described, the impact on confidentiality and integrity of network communications is significant.

Apple macOS releases are impacted, specifically macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Any version prior to these cumulative updates may still allow an application to escape sandbox network restrictions.

The CVSS score of 7.1 indicates a medium‑high impact, and the EPSS score of < 1% suggests a very low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector involves an application that can abuse sandbox permissions to access network services beyond its intended scope. An attacker with such an application could gain unauthorized network access, potentially leaking data or enabling lateral movement across the user’s network. The issue is resolved in the indicated software updates, so applying the fix removes the risk.