CVE-2026-26225 is a local privilege escalation vulnerability in Intego Personal Backup, a macOS backup utility. The issue arises because backup task definitions are stored in a location writable by non-privileged users but are processed with elevated privileges. An attacker with local access can create a malicious serialized task file that causes arbitrary file writes to sensitive system locations, leading to root privilege escalation. The vulnerability is classified under CWE-59 (Improper Link Resolution Before File Access). The CVSS 4.0 base score is 8.5, indicating high severity. No patch or vendor advisory is currently available.

A local attacker can exploit this vulnerability to write arbitrary files to sensitive system locations, resulting in privilege escalation to root. This compromises system integrity and security by allowing unauthorized elevated access. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to backup task files. Avoid running Intego Personal Backup tasks with elevated privileges if possible.