A high-severity race condition in Apple macOS allows local, authenticated attackers to escalate privileges to root, posing a significant risk to system integrity.

The vulnerability is a race condition resulting from insufficient locking mechanisms. A malicious application, once running on the system with low-level user privileges, can exploit this flaw to execute code with root-level access.

Successful exploitation allows an attacker to bypass standard system security controls and gain full administrative control over the affected machine. Given the CVSS score of 7.8, this vulnerability represents a high risk to business operations, as unauthorized root access could lead to complete data exfiltration, the installation of persistent malware, or the compromise of sensitive corporate credentials stored on the device.

Immediate Action: Update all affected macOS systems to version 26.6 or later immediately to resolve the underlying race condition.

Proactive Monitoring: Monitor system logs for unauthorized attempts to escalate privileges or unexpected execution of processes with root identity.

Compensating Controls: Implement endpoint detection and response (EDR) solutions to detect and block malicious applications attempting to leverage privilege escalation techniques.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the GitHub repository provided by the enrichment data.

This vulnerability presents a clear path for local privilege escalation, which is a critical threat to the security posture of any macOS deployment. Administrators should prioritize the deployment of the 26.6 update across all managed endpoints to neutralize the risk of unauthorized root access.