Privilege Escalation Vulnerability in Parallels Desktop for Mac

CVE-2024-54189

What is CVE-2024-54189?

A privilege escalation vulnerability has been identified in the Snapshot feature of Parallels Desktop for Mac. This issue arises when a virtual machine snapshot is created, leading to a root service that inadvertently writes to a file owned by a standard user. Exploiting this flaw, an attacker can leverage hard links to manipulate and write to arbitrary files, which can result in unauthorized escalation of privileges.

References