CVE-2026-7483 Details

A local privilege escalation vulnerability has been identified in ESET Endpoint Security and ESET Cyber Security applications for macOS. This vulnerability allows an unprivileged local user to write arbitrary files to the disk as a privileged user. Exploitation is possible through ESET's cross-process communication service, which operates with root permissions and accepts connections from any user without authentication. An attacker could leverage this to write a custom .plist file to the LaunchDaemon folder, potentially achieving root code execution upon the next system restart.

ESET has released fixed versions of the affected applications. Users are advised to upgrade to version 9.1.3100.0 or later from the 9.1 version family, version 9.0.6400.0 or later from the 9.0 version family, or version 8.1.300.0 or later from the 8.1 version family. For ESET Cyber Security for macOS, users should upgrade to version 9.0.6300.0 or later.