A new Parallels Desktop flaw lets regular Mac users gain root access. The fix is in version 27, but Intel Macs can't install it—here's what you need to know.
### The Flaw That Turns a Regular User Into a Superuser
Imagine you're just a normal user on your Mac—no admin rights, no special privileges. Now imagine you can suddenly run code as root, the highest level of access on the system. That's not a hypothetical; it's exactly what security researchers at JFrog found in Parallels Desktop for Mac this week.
The vulnerability allows any local account to escalate privileges all the way to root. But here's the catch: the attacker needs to already have code running on the machine as a regular user. So it's not something someone can trigger remotely over the network. It's a local privilege escalation, which means the bad guy has to be on your system first.
Still, that's a big deal. Once inside, a low-level user could take complete control of the Mac. And for professionals who rely on Parallels to run Windows or Linux virtual machines alongside macOS, this is more than a minor annoyance.
### Why Intel Macs Can't Get the Fix
JFrog says the patch is included in Parallels Desktop 27. Sounds simple, right? Just update. But there's a frustrating twist: Parallels Desktop 27 cannot be installed on Intel-based Macs.
So if you're still running an Intel Mac—and plenty of professionals are, especially in enterprise environments—you're basically out of luck when it comes to this specific fix. You can't upgrade to the patched version, which leaves you exposed unless Parallels decides to backport the fix to an older release.
Yuval Moravchick, who leads security research at JFrog, pointed out that the attack requires local access. That nuance matters. It means you don't need to panic about random internet attackers exploiting this from afar. But if your threat model includes insider risks, malware that's already on your machine, or shared workstations, this is a serious hole.
> "Local privilege escalation bugs are often overlooked because they require a foothold," Moravchick noted. "But once an attacker has that foothold, going from user to root is game over."
### What This Means for Antidetect Browser Users
If you're using antidetect browsers to manage multiple online identities, you probably already care about isolation and security. Many professionals in the US run antidetect browser setups on Macs, sometimes inside virtual machines. A flaw like this can undermine that separation.
Here's why: if an attacker can escalate to root inside your Mac, they can potentially access every virtual machine, every browser profile, and every saved credential. Your carefully crafted antidetect browser fingerprints? They could be compromised along with everything else.
That doesn't mean you should ditch Parallels or your antidetect browser. But it does mean you need to think about defense in depth.
- **Keep your host system clean.** Don't run untrusted code on your Mac, even as a regular user.
- **Use separate user accounts.** If you're doing sensitive work, isolate it from your daily driver.
- **Monitor for unusual activity.** Root access doesn't happen by accident; look for strange processes or login attempts.
- **Consider alternatives.** If you're on an Intel Mac and can't install Parallels 27, explore other virtualization options or run your antidetect browser on a dedicated machine.
### The Bigger Picture for Mac Security
This isn't the first time a virtualization tool has had a privilege escalation bug, and it won't be the last. The real takeaway is that convenience often comes with hidden risks. Parallels makes it easy to run multiple operating systems, but that convenience can also create new attack surfaces.
For now, if you're on an Apple Silicon Mac, update to Parallels Desktop 27 as soon as you can. If you're on Intel, you'll need to wait and see if Parallels offers a patch for older versions—or start planning your migration.
Either way, stay vigilant. Security is a moving target, and the tools we love can sometimes be the weakest link.
