Skip to content
OpenAdvisories
High · 8.5 CVE-2026-26225 EUVD-2026-6164GHSA-wj5q-5q5g-5j5w

Intego Personal Backup Task File Privilege Escalation

Published Feb 12, 2026 · Updated May 12, 2026 · Assigned by VulnCheck

Description

Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation vulnerability. Backup task definitions are stored in a location writable by non-privileged users while being processed with elevated privileges. By crafting a malicious serialized task file, a local attacker can trigger arbitrary file writes to sensitive system locations, leading to privilege escalation to root.

Affected products

VendorProductAffectedFixed
Intego Personal Backup ≤ 10.9.0 —

References