This vulnerability involves a file quarantine bypass in Apple macOS Gatekeeper, which is designed to prevent untrusted applications from running without user consent. The bypass allows an app to evade these checks, undermining the integrity of Gatekeeper's security controls. Apple fixed the issue by implementing additional checks in specific macOS versions: Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. The CVSS score is 5.5 (medium severity), with an attack vector requiring local access and user interaction, no privileges required, and impact limited to integrity.

An attacker could bypass Gatekeeper checks, potentially allowing unauthorized or malicious applications to run on affected macOS systems. This compromises the integrity of the system by allowing untrusted code execution. There is no impact on confidentiality or availability. Exploitation requires local access and user interaction. No known exploits are reported in the wild at this time.

Apple has fixed this vulnerability in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Users and administrators should update to these versions or later to mitigate the issue. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated.