Read the docs
TI-2026-21216 Aliases CVE-2026-26225GHSA-wj5q-5q5g-5j5w

Intego Personal Backup Task File Privilege Escalation

Priority HIGH 72CWE-59Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation vulnerability. Backup task definitions are stored in a location writable by non-privileged users while being processed with elevated privileges. By crafting a malicious serialized task file, a local attacker can trigger arbitrary file writes to sensitive system locations, leading to privilege escalation to root.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.002 9th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IntegoPersonal Backupup to 10.9.0—No fix listedCNA
  • Personal Backup VendorIntego Affected up to 10.9.0 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-26225
  2. 2026-10-03 Alias added: GHSA-wj5q-5q5g-5j5w

References

Exploit 1

Other 3

  • TI-2026-69739 Link following in Intego Antivirus enables local privilege escalation CVSS 4.0HIGH 8.5
  • TI-2026-21215 Intego Log Reporter TOCTOU Local Privilege Escalation CVSS 4.0HIGH 8.5
  • TI-2006-05699 Intego VirusBarrier X4 allows context-dependent attackers to bypass virus protection by… CVSS 2.0MEDIUM 5.0
  • TI-2001-01119 Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which… CVSS 2.0MEDIUM 4.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences