A file quarantine bypass was addressed with additional checks. The vulnerability permits an application to circumvent Gatekeeper, Apple's macOS security gate that verifies code signatures before execution. By sidestepping these checks, an attacker can run malicious or unsigned code with the privileges of the user or system, potentially compromising confidentiality, integrity, or availability of the machine. This is a CWE‑693 weakness involving improper authorization of application execution.

Apple macOS systems before the release of macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, or macOS Tahoe 26.6 are affected. These earlier releases lack the additional quarantine checks required to enforce Gatekeeper validation.

The EPSS score is < 1% and the vulnerability is not listed in CISA's KEV catalog, indicating no documented public exploits at this time. However, the core weakness – bypassing Gatekeeper – could be leveraged by an attacker to execute code with higher privileges if the system remains unpatched. The CVSS score of 5.5 categorises the vulnerability as medium severity, but the potential for system compromise warrants remediation.