What is CVE-2026-0246?

CVE-2026-0246 is a high-severity vulnerability in Apple macOS, classified under Missing Authorization. CVSS score: 7.8/10. Published 2026-05-13.

How severe is CVE-2026-0246?

High severity. CVSS v3 base score is 7.8 out of 10.

Auth bypass in Apple macOS

CVE-2026-0246

A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. This allows the user to execute arbitrary code and read sensitive information otherwise accessible only to privileged accounts. The Prisma Access Agent on iOS, Android and Chrome OS are not affected.

Vulnerability class: Broken Access Control

EPSS: 0.001 (4.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Apple Macos
Linux Linux_kernel
Microsoft Windows
Palo Alto Networks Prisma Access Agent — versions 0, All
Paloaltonetworks Prisma_access_agent

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

psirt@paloaltonetworks.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2026-0246?: CVE-2026-0246 is a high-severity vulnerability in Apple macOS, classified under Missing Authorization. CVSS score: 7.8/10. Published 2026-05-13.
How severe is CVE-2026-0246?: High severity. CVSS v3 base score is 7.8 out of 10.