This vulnerability is an authorization issue arising from improper state management that allows an application to escape its sandbox boundaries. By breaking out of the sandbox, the compromised app could gain unrestricted access to system resources, leading to integrity and confidentiality risks.

The issue affects Apple macOS, specifically versions up to and including macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

No public EPSS score or KEV listing is available, but the described sandbox escape implies a high potential for exploitation. The likely attack vector involves a malicious or compromised application executing within the user's environment, with the flaw enabling it to override sandbox restrictions. Due to the absence of explicit vector data, it is inferred that exploitation requires local execution of a targeted application.