This vulnerability in Apple macOS allowed an application to access sensitive user data because of inadequate sandbox restrictions. Apple fixed the issue by enhancing sandbox controls in macOS Tahoe 26.6 to prevent unauthorized data access. The CVSS score is 5.5, reflecting a local attack vector with low complexity and no privileges required, but user interaction is needed. The impact is confidentiality loss without integrity or availability impact. No known exploits are reported in the wild. No explicit patch links or vendor advisory details are provided beyond the fix in macOS Tahoe 26.6.

An attacker with local access and the ability to trick a user into interaction could exploit this vulnerability to gain unauthorized access to sensitive user data on macOS. The impact is limited to confidentiality loss; integrity and availability are not affected. There are no known active exploits in the wild.

The vulnerability is fixed in macOS Tahoe 26.6 by applying additional sandbox restrictions. Users and administrators should update to macOS Tahoe 26.6 or later to remediate this issue. Patch status is confirmed by the vendor stating the fix is in macOS Tahoe 26.6. No other mitigation steps are indicated.