CVE-2025-24278 is a critical vulnerability in macOS related to insufficient validation of symbolic links (symlinks). This flaw could allow an application to access protected user data without authorization. The issue has been addressed by Apple with improved symlink validation and is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5.