Technical impact
A path traversal flaw in macOS allows a malicious application to delete files without the required privileges. The vulnerability arises from insufficient path validation that permits traversal beyond intended directories, leading to unauthorized file removal. The impact is loss of data integrity and potential disruption of system functionality, as critical files may be deleted by applications that normally lack permissions.
Affected Systems
Apple macOS environments running versions prior to the Golden Gate 27 release are affected. The triviality of the issue is limited to the operating system; no third‑party products are listed as impacted.
Risk and Exploitability
The vulnerability has a CVSS score of 6.2, indicating moderate severity, an EPSS score of < 1%, and is not listed in CISA KEV. The risk depends largely on the existence of a malicious app on the system. Attackers can exploit the flaw locally by installing or running such an application, which then performs arbitrary deletions. The absence of publicly available exploit proofs or advanced attack vectors reduces immediate exploitation likelihood, but the potential for data loss warrants prompt mitigation.
