CVE-2026-49237 | Canonical Multipass up to 1.16.2 on macOS /Library/Application default permission (GHSA-r2xg-x32f-23c5)

A vulnerability was found in Canonical Multipass up to 1.16.2 on macOS. It has been classified as critical. Affected by this issue is some unknown functionality in the library /Library/Application. This manipulation causes incorrect default permissions.

This vulnerability appears as CVE-2026-49237. The attack requires local access. There is no available exploit.

Upgrading the affected component is recommended.