This vulnerability (CVE-2026-10610) in ESET Endpoint Security for macOS involves improper privilege management (CWE-269), enabling a local attacker to escalate privileges and execute arbitrary code as a privileged user. The affected versions are 8.1, 9.0, and 9.1. The CVSS 4.0 base score is 8.5, reflecting high impact with low attack complexity and no user interaction required. The vendor has published the vulnerability but has not yet provided an official fix or remediation level. No cloud service is involved, and no known exploits have been reported.

Successful exploitation allows a local attacker with limited privileges to execute arbitrary code with elevated privileges on the affected macOS systems running ESET Endpoint Security versions 8.1, 9.0, or 9.1. This could lead to full system compromise or unauthorized actions performed with higher privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit local access to trusted users only and monitor for suspicious activity related to privilege escalation attempts. No official remediation or temporary fix is currently available from the vendor.