A permissions issue existed that allowed a running application to read files outside its intended sandbox. By exploiting the flaw an attacker could obtain sensitive user or system data that should have been inaccessible to the process. The vulnerability was removed from the code base in the fixed releases.

Apple macOS products are affected by this flaw in all releases prior to the patched versions that shipped with macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. These fixed releases contain the removal of the vulnerable code that prevented sandbox escape.

The CVSS score of 5.5 indicates a moderate severity for an information‑disclosure vulnerability that permits a sandboxed application to read files outside its intended confines. The EPSS score of less than 1% shows that exploitation is considered unlikely at present. Because the vulnerability is not listed in the CISA KEV catalog, there is no evidence of widespread exploitation only local execution is required. An attacker would need to run a malicious application on the victim’s macOS system; once executed, the application could read protected files that should have been invisible, leading to disclosure of sensitive personal or system data. The low EPSS and absence from KEV suggest that the risk is moderate, yet the ability to bypass sandbox restrictions still poses a notable threat if an attacker can gain local execution.