CVE-2026-90894 (GCVE-0-2026-90894)
Vulnerability from cvelistv5
Published
2026-09-14 09:52
Modified
2026-09-15 08:49
Severity ?
VLAI Severity ?
EPSS score ?
CWE
Summary
Parallels Desktop runs prl_disp_service as root. Local clients reach it on the world-writable socket /var/run/prl_disp_service.socket. PrlSrv_LoginLocal accepts peer credentials. No Parallels signature. No admin group.
After login, PrlSrv_InstallAppliance lets you pick the appliance folder (sVmParentPath). The daemon unpacks with one string, tar -xf "%1" -C "%2", then Qt QProcess::splitCommand chops that string into words. A quote in the folder name closes early. The leftover text becomes extra tar flags. macOS tar --use-compress-program= runs the named program as root.
References
| URL | Tags | |||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Parallels | Parallels Desktop for Mac |
Version: 26.4.0 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-90894",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-14T10:23:23.018106Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T10:23:46.541Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"packageName": "Parallels Desktop",
"platforms": [
"macOS"
],
"product": "Parallels Desktop for Mac",
"vendor": "Parallels",
"versions": [
{
"status": "affected",
"version": "26.4.0"
},
{
"status": "unaffected",
"version": "27.0.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Yuval Moravchick | JFrog"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eParallels Desktop runs\u0026nbsp;\u003ccode\u003eprl_disp_service\u003c/code\u003e\u0026nbsp;as root. Local clients reach it on the world-writable socket\u0026nbsp;\u003ccode\u003e/var/run/prl_disp_service.socket\u003c/code\u003e.\u0026nbsp;\u003ccode\u003ePrlSrv_LoginLocal\u003c/code\u003e\u0026nbsp;accepts peer credentials. No Parallels signature. No admin group.\u003c/p\u003e\u003cp\u003eAfter login,\u0026nbsp;\u003ccode\u003ePrlSrv_InstallAppliance\u003c/code\u003e\u0026nbsp;lets you pick the appliance folder (\u003ccode\u003esVmParentPath\u003c/code\u003e). The daemon unpacks with one string,\u0026nbsp;\u003ccode\u003etar -xf \"%1\" -C \"%2\"\u003c/code\u003e, then Qt\u0026nbsp;\u003ccode\u003eQProcess::splitCommand\u003c/code\u003e\u0026nbsp;chops that string into words. A quote in the folder name closes early. The leftover text becomes extra tar flags. macOS\u0026nbsp;\u003ccode\u003etar --use-compress-program=\u003c/code\u003e\u0026nbsp;runs the named program as root.\u003c/p\u003e"
}
],
"value": "Parallels Desktop runs\u00a0prl_disp_service\u00a0as root. Local clients reach it on the world-writable socket\u00a0/var/run/prl_disp_service.socket.\u00a0PrlSrv_LoginLocal\u00a0accepts peer credentials. No Parallels signature. No admin group.\n\n\n\nAfter login,\u00a0PrlSrv_InstallAppliance\u00a0lets you pick the appliance folder (sVmParentPath). The daemon unpacks with one string,\u00a0tar -xf \"%1\" -C \"%2\", then Qt\u00a0QProcess::splitCommand\u00a0chops that string into words. A quote in the folder name closes early. The leftover text becomes extra tar flags. macOS\u00a0tar --use-compress-program=\u00a0runs the named program as root."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eJFrog has a private proof of concept that obtains root on Parallels Desktop 26.4.0. The same proof of concept does not obtain root on 27.0.1. Public exploit details are not included in this record.\u003c/p\u003e"
}
],
"value": "JFrog has a private proof of concept that obtains root on Parallels Desktop 26.4.0. The same proof of concept does not obtain root on 27.0.1. Public exploit details are not included in this record."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-88",
"description": "CWE-88 Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T08:49:26.122Z",
"orgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d",
"shortName": "JFROG"
},
"references": [
{
"name": "Parallels Desktop for Mac",
"tags": [
"product"
],
"url": "https://www.parallels.com/products/desktop/"
},
{
"name": "Parallels Desktop 27 updates summary",
"tags": [
"release-notes"
],
"url": "https://kb.parallels.com/en/131168"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpgrade to Parallels Desktop 27.0.0 or later.\u003c/p\u003e"
}
],
"value": "Upgrade to Parallels Desktop 27.0.0 or later."
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Parallels Desktop local privilege escalation via appliance extract argument injection",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d",
"assignerShortName": "JFROG",
"cveId": "CVE-2026-90894",
"datePublished": "2026-09-14T09:52:43.570Z",
"dateReserved": "2026-09-14T09:33:11.942Z",
"dateUpdated": "2026-09-15T08:49:26.122Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-90894\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-14T10:23:23.018106Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-14T10:23:41.733Z\"}}], \"cna\": {\"title\": \"Parallels Desktop local privilege escalation via appliance extract argument injection\", \"source\": {\"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Yuval Moravchick | JFrog\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Parallels\", \"product\": \"Parallels Desktop for Mac\", \"versions\": [{\"status\": \"affected\", \"version\": \"26.4.0\"}, {\"status\": \"unaffected\", \"version\": \"27.0.0\"}], \"platforms\": [\"macOS\"], \"packageName\": \"Parallels Desktop\", \"defaultStatus\": \"unknown\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"JFrog has a private proof of concept that obtains root on Parallels Desktop 26.4.0. The same proof of concept does not obtain root on 27.0.1. Public exploit details are not included in this record.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eJFrog has a private proof of concept that obtains root on Parallels Desktop 26.4.0. The same proof of concept does not obtain root on 27.0.1. Public exploit details are not included in this record.\u003c/p\u003e\", \"base64\": false}]}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Upgrade to Parallels Desktop 27.0.0 or later.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eUpgrade to Parallels Desktop 27.0.0 or later.\u003c/p\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.parallels.com/products/desktop/\", \"name\": \"Parallels Desktop for Mac\", \"tags\": [\"product\"]}, {\"url\": \"https://kb.parallels.com/en/131168\", \"name\": \"Parallels Desktop 27 updates summary\", \"tags\": [\"release-notes\"]}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.4\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Parallels Desktop runs\\u00a0prl_disp_service\\u00a0as root. Local clients reach it on the world-writable socket\\u00a0/var/run/prl_disp_service.socket.\\u00a0PrlSrv_LoginLocal\\u00a0accepts peer credentials. No Parallels signature. No admin group.\\n\\n\\n\\nAfter login,\\u00a0PrlSrv_InstallAppliance\\u00a0lets you pick the appliance folder (sVmParentPath). The daemon unpacks with one string,\\u00a0tar -xf \\\"%1\\\" -C \\\"%2\\\", then Qt\\u00a0QProcess::splitCommand\\u00a0chops that string into words. A quote in the folder name closes early. The leftover text becomes extra tar flags. macOS\\u00a0tar --use-compress-program=\\u00a0runs the named program as root.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eParallels Desktop runs\u0026nbsp;\u003ccode\u003eprl_disp_service\u003c/code\u003e\u0026nbsp;as root. Local clients reach it on the world-writable socket\u0026nbsp;\u003ccode\u003e/var/run/prl_disp_service.socket\u003c/code\u003e.\u0026nbsp;\u003ccode\u003ePrlSrv_LoginLocal\u003c/code\u003e\u0026nbsp;accepts peer credentials. No Parallels signature. No admin group.\u003c/p\u003e\u003cp\u003eAfter login,\u0026nbsp;\u003ccode\u003ePrlSrv_InstallAppliance\u003c/code\u003e\u0026nbsp;lets you pick the appliance folder (\u003ccode\u003esVmParentPath\u003c/code\u003e). The daemon unpacks with one string,\u0026nbsp;\u003ccode\u003etar -xf \\\"%1\\\" -C \\\"%2\\\"\u003c/code\u003e, then Qt\u0026nbsp;\u003ccode\u003eQProcess::splitCommand\u003c/code\u003e\u0026nbsp;chops that string into words. A quote in the folder name closes early. The leftover text becomes extra tar flags. macOS\u0026nbsp;\u003ccode\u003etar --use-compress-program=\u003c/code\u003e\u0026nbsp;runs the named program as root.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-88\", \"description\": \"CWE-88 Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-78\", \"description\": \"CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-269\", \"description\": \"CWE-269 Improper Privilege Management\"}]}], \"providerMetadata\": {\"orgId\": \"48a46f29-ae42-4e1d-90dd-c1676c1e5e6d\", \"shortName\": \"JFROG\", \"dateUpdated\": \"2026-09-15T08:49:26.122Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-90894\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-15T08:49:26.122Z\", \"dateReserved\": \"2026-09-14T09:33:11.942Z\", \"assignerOrgId\": \"48a46f29-ae42-4e1d-90dd-c1676c1e5e6d\", \"datePublished\": \"2026-09-14T09:52:43.570Z\", \"assignerShortName\": \"JFROG\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…