Parallels Desktop Flaw 'ParaShells' Gives macOS Root Access

Executive Summary

A significant local privilege escalation (LPE) vulnerability has been disclosed in Parallels Desktop for Mac, a popular virtualization software. The flaw, nicknamed "ParaShells" and tracked as CVE-2026-90894, allows a local user with standard, non-administrative privileges to gain full root access on the host macOS system. The vulnerability was discovered by a researcher from JFrog and reported to Parallels' parent company, Alludo. A patch has been released, and given the publication of technical details, immediate updates are recommended.

Vulnerability Details

The "ParaShells" vulnerability is a local privilege escalation flaw. It stems from a weakness in how Parallels Desktop handles certain operations, allowing a low-privileged local user to bypass standard macOS security controls. By exploiting this weakness, a user who should be restricted to their own account can execute code with the privileges of the root user, granting them complete control over the entire machine. This type of vulnerability is especially dangerous in multi-user environments such as university labs, corporate shared workstations, or any system with multiple user accounts.

Affected Systems

• Parallels Desktop for Mac: All versions prior to v27.0.0 are affected.

Exploitation Status

The vulnerability was patched in Parallels Desktop v27.0.0, released in early September 2026. The technical details of the flaw were publicly disclosed by the discovering researcher on September 16, 2026. While a full proof-of-concept (PoC) exploit script was withheld to prevent immediate widespread abuse, the detailed write-up provides a clear path for knowledgeable attackers to develop their own exploit.

Impact Assessment

The impact of CVE-2026-90894 is severe for affected systems. An attacker who has already gained initial access to a Mac with a low-privilege account (e.g., through phishing or malware) can use this vulnerability to:

• Gain full administrative control of the system.
• Install persistent malware, such as rootkits or keyloggers.
• Access, modify, or delete any file on the system, including those of other users.
• Disable security software and cover their tracks.
• Pivot to other systems on the network.

In a shared environment, one compromised standard account can lead to the compromise of the entire system and all data on it.

Cyber Observables — Hunting Hints

Detecting exploitation of LPE vulnerabilities often involves looking for anomalous process behavior. The following patterns may help identify related activity:

Detection Methods

1. Version Scanning: The most reliable detection method is to identify vulnerable installations. Use asset management or endpoint security tools to scan all macOS devices for installations of Parallels Desktop with a version number lower than 27.0.0.
2. Behavioral Analysis: Configure EDR tools to alert on suspicious process behavior, such as a user-level process associated with Parallels attempting to write to system-critical locations or modify security configurations. This aligns with D3FEND Process Analysis (D3-PA).

Remediation Steps

1. Update Parallels Desktop: The primary and most effective remediation is to update all installations of Parallels Desktop for Mac to version 27.0.0 or higher. This can be done through the application's built-in updater or by downloading the latest version from the official website.
2. Review Local Accounts: As a precautionary measure, administrators should review all local user accounts on machines running Parallels Desktop. Disable any unnecessary or dormant accounts to reduce the attack surface.
3. Principle of Least Privilege: Enforce the principle of least privilege for all user accounts. While this vulnerability bypasses standard controls, limiting the number of accounts on a system reduces the number of potential entry points for an attacker.