A logic flaw in macOS allows a file that references a network share to be opened, leading to unexpected software execution. The vulnerability arises from insufficient checks during file opening, enabling arbitrary code to run locally. Based on the description, it is inferred that the primary attack vector involves opening such a file from a network share. The flaw also represents a Control Flow Hijack (CWE-703) issue, allowing arbitrary execution beyond simple input errors. This enables code execution that can compromise system integrity and confidentiality.

Affected Apple macOS releases include those prior to macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. The fix was integrated in these versions; any macOS system running older builds is vulnerable.

The CVSS score of 8.8 and EPSS score of less than 1% indicate a high severity but low likelihood of exploitation. The vulnerability can be exploited by triggering a file open from a network share, a scenario common to local users or remote attackers with a persisted shared file. It is not listed in CISA’s Known Exploited Vulnerabilities catalog, indicating no confirmed exploitation yet, but the potential impact of arbitrary execution warrants immediate concern.