Parallels Desktop flaw can give local users root access on Macs
Summary
JFrog disclosed CVE-2026-90894, an argument injection flaw affecting Parallels Desktop 26.4.0 on Apple silicon Macs. Alludo fixed it in version 27.0.0; exploitation requires local code execution and an active service.
Key points
- The flaw affects Parallels Desktop for Mac v26.4.0 on Apple ARM-based systems; older builds were not tested.
- Exploitation requires a vulnerable installation, an active prl_disp_service and the ability to run code as a low-privileged local user. A VM does not need to be running.
- JFrog describes an argument injection in the appliance extraction path, involving a world-writable Unix socket and weak local-client authentication.
- Successful exploitation can grant root access, enabling system software replacement, access to other users’ data and persistence through launchd.
- Alludo fixed the vulnerability in Parallels Desktop v27.0.0, released in early September 2026.
- JFrog published technical details but did not publish its proof-of-concept script.
- The researcher advised organizations to inventory Macs running Parallels Desktop, restrict local accounts and upgrade to version 27.0.0 or later.
Article Details
- Vulnerability Types
- Argument injection
- Local privilege escalation
- Affected Versions
- Parallels Desktop for Mac v26.4.0
- Exploitation Status
- unknown
- Exploit Availability
- claimed_or_private
- Patch Status
- available
MITRE ATT&CK
CVE
People
Vendors
Products
macOSCVE-2026-90894 is an argument injection flaw that’s proven to affect Parallels Desktop for Mac v26.4.0, installed on macOS running on Apple’s own ARM-based processor.Parallels DesktopJFrog disclosed CVE-2026-90894, a Parallels Desktop flaw dubbed “ParaShells” that can let any local user on a Mac escalate to root on the host.