Parallels Desktop Flaw Grants Root Access to Non-Admins

Parallels Desktop for Mac contains a security flaw that allows a user with a standard, non-administrator account to execute code with root privileges. This effectively grants the user the highest level of access on the operating system, bypassing normal security restrictions. The issue was identified by JFrog and published this week, highlighting a significant risk for anyone running virtual machines on their Mac.

The attack does not require remote access or a running virtual machine. Instead, it exploits a background service that runs with elevated permissions. Because the vulnerability is local, it cannot be triggered over a network, but it poses a serious threat on any Mac where untrusted code might be installed. The catch is significant: the patched version of the software is not available for older Intel-based Macs, leaving those users vulnerable indefinitely.

Local Attack Bypasses Standard Security

The flaw, tracked as CVE-2026-90894, stems from how Parallels handles the installation of new virtual machines. A background service responsible for setting up network connections runs with root access. On affected versions, the communication socket for this service is writable by any user on the system. This means any program running under a standard user account can connect to it without needing special permissions or a valid signature.

When a user attempts to install a virtual machine, the service constructs a command to unpack the necessary files. The user chooses the destination folder for this installation. By including specific characters in the folder name, an attacker can manipulate this command. This technique, known as command injection, allows the attacker to add extra instructions that tell the system to run a different program. Since the original command runs as root, the newly executed program inherits those same high-level privileges.

Intel Macs Left Without Patch

JFrog confirmed that the fix is included in Parallels Desktop version 27. However, this version is built exclusively for Apple silicon chips. Users with older Macs based on Intel processors cannot install this update. Consequently, these devices remain exposed to the vulnerability. Parallels has not published a specific statement regarding this issue, citing a policy of not discussing vulnerabilities until a public fix is released.

There is also some confusion regarding the exact timing of the fix. JFrog’s timeline suggests the patch arrived in a build released in early September, while Parallels’ own release notes point to a slightly earlier date. To ensure safety, users on Apple silicon Macs should install the latest available build, which covers both potential fixes. For Intel Mac users, no official patch exists, meaning they must rely on keeping their system isolated from untrusted software.

Real World Risks and Scope

While this is a local flaw, it is still dangerous because standard user accounts are common on shared or personal computers. A malicious software package, a compromised build tool, or a weak account on a shared lab machine could all be used to trigger the exploit. JFrog notes that the attack works on default installations, meaning no special configuration is required. The company advises treating any version below 27.0.0 as affected, though it did not test every older build individually.

The Hacker News reported on the disclosure, noting that Parallels has not commented on the specific CVE. JFrog did not observe any active exploitation in the wild at the time of publication. However, the potential for abuse remains high for anyone using the software to run Windows or Linux environments. The core issue is a failure to properly sanitize user input when constructing system commands, a common but critical error in software development.