Apple Screen Sharing Vulnerability Exploited to Execute Command as Root

A newly disclosed logic flaw in macOS Screen Sharing shows how a feature meant only to grant screen-viewing access can be twisted into a path for full root command execution. The issue, tracked as CVE-2026-43760, affects the screensharingd service and its file-copy helpers, SSFileCopySender and SSFileCopyReceiver, on macOS systems where Screen Sharing or Remote Management is enabled with the legacy VNC password option turned on. The root cause lies in how Apple’s Screen Sharing service handles two very different authentication paths. When a user connects through native Apple authentication, the service correctly identifies them as a macOS account and runs any file-copy operations under that user’s own...

Læs hele artiklen hos kilden.