Privacy-control bypass via insufficient PackageKit checks

Authentication bypass in PackageKit in Apple macOS allows local users to bypass Privacy preferences through a malicious app. Apple states only that PackageKit performed insufficient checks and has not published the checked object, request path, or exact trust decision. Execution of an app and user interaction are required; the documented consequence is limited to evading selected privacy controls, with no reported code execution or privilege gain.