{"id":"CVE-2026-119251","kind":"vulnerability","aliases":["CVE-2026-119251"],"related":[],"title":"WiFiman Desktop for macOS: improper access control allows local privilege escalation","description":"A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device.","summary":"WiFiman Desktop for macOS has an improper access control flaw. A person with local access and high privileges can use it to escalate privileges on the host.","severity":"medium","cvss":6.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["macos","other","wifiman"],"not_affected_if":["no-wifiman-desktop","windows-or-linux-only"],"how_to_check":"- Check the installed WiFiman Desktop version on the Mac (Applications folder or About dialog).","fix":null,"status":"open","published_at":"2026-10-29T19:17:21+00:00","first_seen_at":"2026-10-29T19:26:48+00:00","triaged_at":"2026-10-29T19:27:28+00:00","updated_at":"2026-10-29T19:27:28+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-29T19:27:28Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"WiFiman Desktop for macOS: improper access control allows local privilege escalation","impact":"high","summary":"WiFiman Desktop for macOS has an improper access control flaw. A person with local access and high privileges can use it to escalate privileges on the host.","audience":"everyone","category":"other","nicknames":[],"who_cares":["wifiman","macos"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user escalates privileges on the Mac","analyst_note":"Confirm affected WiFiman Desktop for macOS versions and the vendor fix from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-119251.","how_to_check":"- Check the installed WiFiman Desktop version on the Mac (Applications folder or About dialog).\n- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-wifiman-desktop","windows-or-linux-only"],"who_is_affected":"People running WiFiman Desktop for macOS. The sources say an attacker needs local access and high privileges already, so the risk is mainly on shared or managed Macs. The sources do not state affected versions.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000644,"input_tokens":4079,"output_tokens":472,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119251':14A,17A '-2026':13A,16A 'access':6A,28B,35B,53C,61C 'actor':50C 'allow':8A 'control':7A,29B,62C 'could':57C 'cve':12A,15A 'desktop':2A,22B,67C 'devic':76C 'escal':11A,43B,71C 'exploit':58C 'flaw':30B 'found':64C 'high':37B,55C 'host':47B,75C 'improp':5A,27B,60C 'local':9A,34B,52C 'maco':4A,18B,24B,69C 'malici':49C 'person':32B 'privileg':10A,38B,44B,56C,72C 'use':40B 'vulner':63C 'wifiman':1A,20B,21B,66C","nicknames":[],"mitigations":[],"who_affected":"People running WiFiman Desktop for macOS. The sources say an attacker needs local access and high privileges already, so the risk is mainly on shared or managed Macs. The sources do not state affected versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"first_public_at":"2026-10-29T19:17:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"fe490ce8-0395-4072-90d8-2707e1bdf984","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119251","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119251","severity":null,"published_at":"2026-10-29T19:17:21+00:00","modified_at":"2026-10-29T19:17:21+00:00","first_seen_at":"2026-10-29T19:26:48+00:00","fetched_at":"2026-10-29T19:26:48+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}