This vulnerability (CWE-59) arises from improper link resolution before file access in the installer of the Canon PIXUS iX6800 Series CUPS Printer Driver for macOS. A local attacker with login privileges can exploit a specially crafted symbolic link during installation to escalate privileges by modifying permissions of directories they should not normally access. The affected versions are 16.91.0.0 or earlier, covering multiple regional variants of the driver. The CVSS 3.1 base score is 5.0, reflecting a medium severity with local attack vector, low attack complexity, and required user interaction.

The vulnerability allows a local attacker with login privileges to modify directory permissions improperly during driver installation, potentially leading to unauthorized changes in the file system. There is no indication of confidentiality or availability impact, but integrity can be compromised. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local user access to trusted users only and avoid installing or updating the affected printer driver versions from untrusted sources.