The vulnerability allows an attacker with physical access to a locked macOS device to view sensitive user information. Improved checks were added, and the flaw is fixed in macOS 26.5. The primary impact is the disclosure of confidential data, potentially compromising personal files and credentials.

Apple macOS devices prior to version 26.5 are affected. The issue was addressed in macOS 26.5 and later.

The EPSS score is not available and the vulnerability is not in CISA KEV. Exploitation requires physical proximity to a locked device; no network access is needed. Attackers who gain such access can read data without authentication, posing a risk primarily to users with less strict physical security.