A path handling issue in macOS, addressed by improved validation in a newer release, can allow an application to access protected user data. The flaw arises when the system fails to properly constrain file system paths, potentially enabling directory traversal or similar abuses that expose sensitive content. This weakness falls under the category of path traversal or equivalent information‑exposure vulnerabilities.

Apple’s macOS is impacted, specifically versions that precede the Golden Gate 27 release. The issue is fixed in Golden Gate 27 and later, so any macOS installation older than that is vulnerable. No specific vendor or third‑party product is cited; the problem originates within the macOS operating system itself.

The EPSS score is <1%, and the vulnerability is not listed in the CISA KEV catalog, so no concrete exploitation data is reported. The CVSS score of 5.5 indicates moderate severity. Nonetheless, because the flaw concerns access to protected user data, it poses a significant risk for local or privileged attackers who can run or influence an application. Likely attack vectors involve a locally‑run application with elevated or user‑privileged permissions exploiting the path handling defect to read files outside its intended scope. While the exact severity and exploit likelihood cannot be quantified here, the potential impact on confidentiality warrants swift action.