A parsing flaw in macOS’s directory path handling allows an application to construct a path that bypasses normal validation, enabling traversal outside of its intended working directory. The flaw is classified as CWE‑22 and, if exploited, can elevate a local application to root privileges, granting complete control over the machine, including confidentiality, integrity, and availability of all data and services.

Apple macOS versions before Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 are affected. These releases are at risk when running applications that can manipulate file paths. The issue is fixed in the listed versions.

The vulnerability has a CVSS score of 7.8, indicating high severity. EPSS is below 1 %, showing a low likelihood of widespread exploitation at present. It is not in CISA’s KEV catalog. The attack requires local access, typically by running a malicious application or providing a crafted path to a legitimate application. No public exploits are documented, but the high severity combined with local execution makes it a tangible risk for users of unpatched systems.