Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-26224: Intego Log Reporter on macOS can let an attacker gain extra privileges

CVE-2026-26224 · published 8 months ago

Summary

A tool bundled with Intego security products on macOS can be exploited by an attacker to gain extra privileges on a computer. This could allow an attacker to do things they normally can't do. Intego recommends updating to a fixed version of the tool to fix this issue.

Original advisory text

Intego Log Reporter, a macOS diagnostic utility bundled with Intego security products that collects system and application logs for support analysis, contains a local privilege escalation vulnerability. A root-executed diagnostic script creates and writes files in /tmp without enforcing secure directory handling, introducing a time-of-check to time-of-use (TOCTOU) race condition. A local unprivileged user can exploit a symlink-based race condition to cause arbitrary file writes to privileged system locations, resulting in privilege escalation to root.

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

8.5 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition

Timeline

Published12 Feb 2026

Updated26 Oct 2026

First seen6 Mar 2026

Sources

CVE-2026-26224 · NVD

Track software like this

Free during beta