EIP-2026-103369

This writeup describes a privilege escalation vulnerability in macOS where a non-root user can write to any non-SIP-protected file, including cron files, to execute commands as root. The exploit leverages the cron system's lack of ownership validation for crontab files.