A vulnerability identified as CVE-2026-68490 involves incorrect permission assignment that allows local users to access sensitive CalDAV and CardDAV information belonging to other accounts. This issue affects local privilege boundaries and could lead to unauthorized data disclosure. No specific affected software versions or patches are currently documented.