CyberRota Analysis
AI-GeneratedParallels Desktop is vulnerable due to the prl_disp_service running with root privileges and accepting connections on a world-writable socket, allowing local users to execute arbitrary commands as root. This can lead to privilege escalation, enabling attackers to gain full control over the system. Organizations using Parallels Desktop should prioritize patching this vulnerability to mitigate the risk of unauthorized access and potential system compromise.
Original NVD Description
Parallels Desktop runs prl_disp_service as root. Local clients reach it on the world-writable socket /var/run/prl_disp_service.socket. PrlSrv_LoginLocal accepts peer credentials. No Parallels signature. No admin group. After login, PrlSrv_InstallAppliance lets you pick the appliance folder (sVmParentPath). The daemon unpacks with one string, tar -xf "%1" -C "%2", then Qt QProcess::splitCommand chops that string into words. A quote in the folder name closes early. The leftover text becomes extra tar flags. macOS tar --use-compress-program= runs the named program as root.