Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix

Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, software company JFrog said this week. The attack needs code already running on the machine as a normal user, so it does not work over the network. JFrog says the fix is in Parallels Desktop 27, a version that Intel Macs cannot install. Yuval Moravchick, who leads

According to the article, a vulnerability in Parallels Desktop for Mac allows a local non-admin user to execute code as root, with the patch only available in Parallels Desktop 27, which Intel-based Macs cannot install. This is a host-level escalation flaw that requires existing local code execution and does not work over the network, but it affects environments relying on Parallels for virtualization on Macs. From a RealGround perspective, this illustrates AI supply chain and infrastructure risk: compromised virtualization hosts can undermine the integrity and isolation of AI workloads and agents running in guest environments. Organizations should treat host hypervisor vulnerabilities as part of their AI supply chain threat model and ensure they track component versions, compensating controls, and upgrade paths, especially when patches are unavailable for certain hardware platforms.