TL;DR Security researcher Ilya Andr from PT MAZE recently uncovered a critical flaw in macOS. The macOS DesktopServicesHelper vulnerability allows local attackers to elevate privileges directly to root. Furthermore, technical details of the vulnerability and working proof-of-concept exploit code have been publicly disclosed. Why It Matters Industry estimates suggest that over 100 million Mac devices run modern macOS installations worldwide. Therefore, flaws that grant root access pose a grave threat to desktop environments.

TL;DR A researcher has published full details and a working proof-of-concept for a macOS privilege escalation bug. It turns an unprivileged user into root in about two seconds, with no user interaction and no password prompt. Apple fixed the flaw in macOS 26.6, yet assigned no CVE. Why it matters Local privilege escalation flaws let attackers finish a break-in. Malware that lands as a normal user can use this bug to seize full control.