Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-90894

Parallels Desktop local privilege escalation via appliance extract argument injection

CVSS 3.1 7.8 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-90894

Published

Parallels Desktop runs prl_disp_service as root. Local clients reach it on the world-writable socket /var/run/prl_disp_service.socket. PrlSrv_LoginLocal accepts peer credentials. No Parallels signature. No admin group. After login, PrlSrv_InstallAppliance lets you pick the appliance folder (sVmParentPath). The daemon unpacks with one string, tar -xf "%1" -C "%2", then Qt QProcess::splitCommand chops that string into words. A quote in the folder name closes early. The leftover text becomes extra tar flags. macOS tar --use-compress-program= runs the named program as root.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-90894

Published

Parallels Desktop

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Parallels",
                    "product": "Parallels Desktop for Mac",
                    "platforms": [
                        "macOS"
                    ],
                    "packageName": "Parallels Desktop",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "26.4.0"
                        },
                        {
                            "status": "unaffected",
                            "version": "27.0.0"
                        }
                    ],
                    "defaultStatus": "unknown"
                }

Original source record · Cite this exact observation · Complete original publisher JSON