CVE-2026-26225
Awaiting Analysis Awaiting Analysis - Queue
Local Privilege Escalation in Intego Personal Backup via Arbitrary File Write

Publication date: 2026-02-12

Last updated on: 2026-02-13

Assigner: VulnCheck

Description
Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation vulnerability. Backup task definitions are stored in a location writable by non-privileged users while being processed with elevated privileges. By crafting a malicious serialized task file, a local attacker can trigger arbitrary file writes to sensitive system locations, leading to privilege escalation to root.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-12
Last Modified
2026-02-13
Generated
2026-05-07
AI Q&A
2026-02-13
EPSS Evaluated
2026-05-05
NVD
EUVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
intego personal_backup *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in Intego Personal Backup, a macOS backup utility. It involves a local privilege escalation issue where backup task definitions are stored in a location writable by non-privileged users but are processed with elevated privileges. An attacker with local access can create a malicious serialized task file that triggers arbitrary file writes to sensitive system locations, allowing them to escalate their privileges to root.


How can this vulnerability impact me? :

The vulnerability can allow a local attacker to gain root privileges on the affected system. This means the attacker could execute arbitrary code with the highest level of system access, potentially leading to full system compromise, unauthorized data access, modification, or deletion, and disruption of system operations.


How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:

I don't know


How can this vulnerability be detected on my network or system? Can you suggest some commands?

I don't know


What immediate steps should I take to mitigate this vulnerability?

I don't know


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart