Audition contains an Incorrect Authorization vulnerability (CVE-2026-113560) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability changes the security scope and has a high severity rating.