Omnissa Workspace ONE Assist CVE-2026-22926

Workspace ONE Assist is Omnissa's (formerly VMware EUC) remote-support and screen-sharing agent that ships as part of the Workspace ONE unified endpoint management suite, running with elevated privileges on managed macOS endpoints in order to perform remote assistance, file transfer, and configuration tasks. The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory, aka Path Traversal): the macOS agent appears to handle a filesystem path supplied by a lower-privileged context without adequately normalizing or canonicalizing it, so sequences such as ../ or absolute paths escape the intended directory boundary. Because the privileged Assist helper process operates outside the user's sandbox (typical for macOS support agents installed via MDM), a traversal that lets the unprivileged caller influence which file is read, written, or executed by the helper translates directly into local privilege escalation on the endpoint.