CVE-2026-26225
Awaiting Analysis Awaiting Analysis - Queue
Local Privilege Escalation in Intego Personal Backup via Arbitrary File Write

Publication date: 2026-02-12

Last updated on: 2026-02-13

Assigner: VulnCheck

Description
Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation vulnerability. Backup task definitions are stored in a location writable by non-privileged users while being processed with elevated privileges. By crafting a malicious serialized task file, a local attacker can trigger arbitrary file writes to sensitive system locations, leading to privilege escalation to root.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-12
Last Modified
2026-02-13
Generated
2026-06-16
AI Q&A
2026-02-13
EPSS Evaluated
2026-06-15
NVD
CVE-2026-26225
EUVD
EUVD-2026-6164
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
intego personal_backup *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in Intego Personal Backup, a macOS backup utility. It involves a local privilege escalation issue where backup task definitions are stored in a location writable by non-privileged users but are processed with elevated privileges. An attacker with local access can create a malicious serialized task file that triggers arbitrary file writes to sensitive system locations, allowing them to escalate their privileges to root.

Impact Analysis

The vulnerability can allow a local attacker to gain root privileges on the affected system. This means the attacker could execute arbitrary code with the highest level of system access, potentially leading to full system compromise, unauthorized data access, modification, or deletion, and disruption of system operations.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-26225. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart