The vulnerability is a permissions flaw that may enable a local application to access protected user data that should be restricted. The flaw arises from insufficient authorization checks, allowing the application to bypass normal access controls. The impact is a confidentiality breach as the attacker could read sensitive information stored on the Mac without user consent.

Apple macOS Tahoe versions earlier than 26.5 are affected. The issue is fixed in macOS Tahoe 26.5 and later.

The EPSS score is not available and the vulnerability is not listed in CISA KEV, indicating no known active exploitation. The CVSS severity is not provided, but the nature of the flaw suggests a significant risk if the system is not patched. The likely attack vector is local, requiring a user to run an application that has been granted insufficiently restricted permissions.