This vulnerability in X-VPN macOS website version 77.0 arises from a TOCTOU race condition in the quarantine and restore workflow. A local attacker with limited privileges can exploit this race condition combined with symbolic link manipulation to corrupt privileged files. The CVSS 4.0 score of 7.3 reflects high impact on confidentiality, integrity, and availability, with low attack complexity and no user interaction required. No vendor advisory or patch information is currently provided, and no known exploits are reported in the wild.

Successful exploitation allows a local attacker with partial privileges to corrupt privileged files on the system, potentially leading to privilege escalation or system compromise. The vulnerability impacts confidentiality, integrity, and availability of the affected system components.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious activity related to file operations in the quarantine and restore workflow.