Local Privilege Escalation Vulnerability in Akamai Guardicore Platform Agent for macOS

CVE-2026-46449

What is CVE-2026-46449?

The Akamai Guardicore Platform Agent for macOS features a local privilege escalation vulnerability within the wapptunneld component. This vulnerability arises from inadequate input validation when network interface names are utilized to execute system commands. By renaming a network interface to include a malicious shell payload, an unprivileged local user can exploit this flaw simply by modifying the interface name through System Settings. When the 'Log out from your IdP' action is triggered, the compromised interface name is processed by the wapptunneld service, allowing arbitrary commands to be executed with elevated root privileges.

References