{"api_version":"1","generated_at":"2026-09-15T08:14:02+00:00","cve":"CVE-2026-90894","urls":{"html":"https://cve.report/CVE-2026-90894","api":"https://cve.report/api/cve/CVE-2026-90894.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-90894","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-90894"},"summary":{"title":"Parallels Desktop local privilege escalation via appliance extract argument injection","description":"Parallels Desktop runs prl_disp_service as root. Local clients reach it on the world-writable socket /var/run/prl_disp_service.socket. PrlSrv_LoginLocal accepts peer credentials. No Parallels signature. No admin group.\n\n\n\nAfter login, PrlSrv_InstallAppliance lets you pick the appliance folder (sVmParentPath). The daemon unpacks with one string, tar -xf \"%1\" -C \"%2\", then Qt QProcess::splitCommand chops that string into words. A quote in the folder name closes early. The leftover text becomes extra tar flags. macOS tar --use-compress-program= runs the named program as root.","state":"PUBLISHED","assigner":"JFROG","published_at":"2026-09-14 10:17:06","updated_at":"2026-09-14 11:17:07"},"problem_types":["CWE-78","CWE-88","CWE-269","CWE-88 CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')","CWE-78 CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","CWE-269 CWE-269 Improper Privilege Management"],"metrics":[{"version":"3.1","source":"reefs@jfrog.com","type":"Secondary","score":"7.8","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"7.8","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"references":[{"url":"https://kb.parallels.com/en/131168","name":"https://kb.parallels.com/en/131168","refsource":"reefs@jfrog.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.parallels.com/products/desktop/","name":"https://www.parallels.com/products/desktop/","refsource":"reefs@jfrog.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90894","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90894","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Parallels","product":"Parallels Desktop for Mac","version":"affected 26.4.0","platforms":["macOS"]},{"source":"CNA","vendor":"Parallels","product":"Parallels Desktop for Mac","version":"unaffected 27.0.1","platforms":["macOS"]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"Upgrade to Parallels Desktop 27.0.1 or later.","time":"","lang":"en"}],"workarounds":[],"exploits":[{"source":"CNA","title":"","value":"JFrog has a private proof of concept that obtains root on Parallels Desktop 26.4.0. The same proof of concept does not obtain root on 27.0.1. Public exploit details are not included in this record.","time":"","lang":"en"}],"credits":[{"source":"CNA","value":"Yuval Moravchick | JFrog","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-90894","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-09-14T10:23:23.018106Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-09-14T10:23:46.541Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unknown","packageName":"Parallels Desktop","platforms":["macOS"],"product":"Parallels Desktop for Mac","vendor":"Parallels","versions":[{"status":"affected","version":"26.4.0"},{"status":"unaffected","version":"27.0.1"}]}],"credits":[{"lang":"en","type":"finder","value":"Yuval Moravchick | JFrog"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Parallels Desktop runs&nbsp;<code>prl_disp_service</code>&nbsp;as root. Local clients reach it on the world-writable socket&nbsp;<code>/var/run/prl_disp_service.socket</code>.&nbsp;<code>PrlSrv_LoginLocal</code>&nbsp;accepts peer credentials. No Parallels signature. No admin group.</p><p>After login,&nbsp;<code>PrlSrv_InstallAppliance</code>&nbsp;lets you pick the appliance folder (<code>sVmParentPath</code>). The daemon unpacks with one string,&nbsp;<code>tar -xf \"%1\" -C \"%2\"</code>, then Qt&nbsp;<code>QProcess::splitCommand</code>&nbsp;chops that string into words. A quote in the folder name closes early. The leftover text becomes extra tar flags. macOS&nbsp;<code>tar --use-compress-program=</code>&nbsp;runs the named program as root.</p>"}],"value":"Parallels Desktop runs prl_disp_service as root. Local clients reach it on the world-writable socket /var/run/prl_disp_service.socket. PrlSrv_LoginLocal accepts peer credentials. No Parallels signature. No admin group.\n\n\n\nAfter login, PrlSrv_InstallAppliance lets you pick the appliance folder (sVmParentPath). The daemon unpacks with one string, tar -xf \"%1\" -C \"%2\", then Qt QProcess::splitCommand chops that string into words. A quote in the folder name closes early. The leftover text becomes extra tar flags. macOS tar --use-compress-program= runs the named program as root."}],"exploits":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>JFrog has a private proof of concept that obtains root on Parallels Desktop 26.4.0. The same proof of concept does not obtain root on 27.0.1. Public exploit details are not included in this record.</p>"}],"value":"JFrog has a private proof of concept that obtains root on Parallels Desktop 26.4.0. The same proof of concept does not obtain root on 27.0.1. Public exploit details are not included in this record."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-88","description":"CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-269","description":"CWE-269 Improper Privilege Management","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-09-14T09:52:43.570Z","orgId":"48a46f29-ae42-4e1d-90dd-c1676c1e5e6d","shortName":"JFROG"},"references":[{"name":"Parallels Desktop for Mac","tags":["product"],"url":"https://www.parallels.com/products/desktop/"},{"name":"Parallels Desktop 27 updates summary","tags":["release-notes"],"url":"https://kb.parallels.com/en/131168"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Upgrade to Parallels Desktop 27.0.1 or later.</p>"}],"value":"Upgrade to Parallels Desktop 27.0.1 or later."}],"source":{"discovery":"EXTERNAL"},"title":"Parallels Desktop local privilege escalation via appliance extract argument injection","x_generator":{"engine":"Vulnogram 1.0.4"}}},"cveMetadata":{"assignerOrgId":"48a46f29-ae42-4e1d-90dd-c1676c1e5e6d","assignerShortName":"JFROG","cveId":"CVE-2026-90894","datePublished":"2026-09-14T09:52:43.570Z","dateReserved":"2026-09-14T09:33:11.942Z","dateUpdated":"2026-09-14T10:23:46.541Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-09-14 10:17:06","lastModifiedDate":"2026-09-14 11:17:07","problem_types":["CWE-78","CWE-88","CWE-269","CWE-88 CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')","CWE-78 CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","CWE-269 CWE-269 Improper Privilege Management"],"metrics":{"cvssMetricV31":[{"source":"reefs@jfrog.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-14T10:23:23.018106Z","id":"CVE-2026-90894","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"90894","Ordinal":"1","Title":"Parallels Desktop local privilege escalation via appliance extra","CVE":"CVE-2026-90894","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"90894","Ordinal":"1","NoteData":"Parallels Desktop runs prl_disp_service as root. Local clients reach it on the world-writable socket /var/run/prl_disp_service.socket. PrlSrv_LoginLocal accepts peer credentials. No Parallels signature. No admin group.\n\n\n\nAfter login, PrlSrv_InstallAppliance lets you pick the appliance folder (sVmParentPath). The daemon unpacks with one string, tar -xf \"%1\" -C \"%2\", then Qt QProcess::splitCommand chops that string into words. A quote in the folder name closes early. The leftover text becomes extra tar flags. macOS tar --use-compress-program= runs the named program as root.","Type":"Description","Title":"Parallels Desktop local privilege escalation via appliance extra"}]}}}