CVE-2025-43240 is a logic flaw in macOS Sequoia that could cause a download's origin to be incorrectly associated. This issue has been addressed with improved checks and fixed in macOS Sequoia 15.6. The vulnerability has a medium severity rating with a CVSS score of 6.2.