CVE-2026-22926 is a local privilege escalation vulnerability in Omnissa Workspace ONE® Assist for macOS caused by improper limitation of a pathname to a restricted directory (CWE-22). This flaw allows a local attacker with limited privileges to potentially escalate their privileges on the affected system. The vulnerability affects multiple versions prior to 24.11.2, 25.02.2, 25.09.1, and 25.11.1. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available to confirm remediation status.

Successful exploitation of this vulnerability could allow a local attacker to escalate privileges, potentially gaining higher-level access to the system. This could lead to unauthorized access to sensitive data, system modification, or disruption of service. The CVSS vector indicates low attack complexity and no user interaction required, increasing the risk on affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to privilege escalation attempts.