The vulnerability stems from insufficient validation of permissions, allowing a local attacker to overwrite files that are normally protected. An attacker with a local foothold could modify critical system or application files, potentially compromising device integrity, enabling further malicious activity, or granting elevated privileges (inferred). Based on the description, it is inferred that the attacker must have local access to the device.

Apple iOS, iPadOS, macOS, and visionOS are affected. Versions prior to iOS 26.7, iPadOS 26.7, macOS Golden Gate 27, and visionOS 27 lack the fix. The security update that addresses the issue is available in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, and visionOS 27. This inference is drawn from the Apple support references provided.

Exploit likelihood is low, with an EPSS score of less than 1%; the vulnerability is not listed in the CISA KEV catalog. The issue requires local access, and a local attacker could overwrite restricted files, resulting in a medium severity (CVSS 6.2) impact that could compromise device integrity or enable privilege escalation (inferred). Based on the description, it is inferred that the attacker must have local access to overwrite protected files, indicating a local attack vector.